Jul 2 07:43:34.773144 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 1 23:45:21 -00 2024 Jul 2 07:43:34.773162 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:43:34.773171 kernel: BIOS-provided physical RAM map: Jul 2 07:43:34.773177 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 2 07:43:34.773182 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 2 07:43:34.773187 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 2 07:43:34.773194 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Jul 2 07:43:34.773200 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 2 07:43:34.773205 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 2 07:43:34.773212 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 2 07:43:34.773217 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Jul 2 07:43:34.773223 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 2 07:43:34.773228 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 2 07:43:34.773234 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 2 07:43:34.773241 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 2 07:43:34.773248 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 2 07:43:34.773254 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 2 07:43:34.773260 kernel: NX (Execute Disable) protection: active Jul 2 07:43:34.773265 kernel: e820: update [mem 0x9b3fa018-0x9b403c57] usable ==> usable Jul 2 07:43:34.773271 kernel: e820: update [mem 0x9b3fa018-0x9b403c57] usable ==> usable Jul 2 07:43:34.773277 kernel: e820: update [mem 0x9b3bd018-0x9b3f9e57] usable ==> usable Jul 2 07:43:34.773283 kernel: e820: update [mem 0x9b3bd018-0x9b3f9e57] usable ==> usable Jul 2 07:43:34.773289 kernel: extended physical RAM map: Jul 2 07:43:34.773294 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 2 07:43:34.773300 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 2 07:43:34.773308 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 2 07:43:34.773314 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Jul 2 07:43:34.773319 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 2 07:43:34.773325 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 2 07:43:34.773331 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 2 07:43:34.773337 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b3bd017] usable Jul 2 07:43:34.773343 kernel: reserve setup_data: [mem 0x000000009b3bd018-0x000000009b3f9e57] usable Jul 2 07:43:34.773349 kernel: reserve setup_data: [mem 0x000000009b3f9e58-0x000000009b3fa017] usable Jul 2 07:43:34.773354 kernel: reserve setup_data: [mem 0x000000009b3fa018-0x000000009b403c57] usable Jul 2 07:43:34.773360 kernel: reserve setup_data: [mem 0x000000009b403c58-0x000000009c8eefff] usable Jul 2 07:43:34.773366 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 2 07:43:34.773373 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 2 07:43:34.773379 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 2 07:43:34.773385 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 2 07:43:34.773391 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 2 07:43:34.773399 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 2 07:43:34.773406 kernel: efi: EFI v2.70 by EDK II Jul 2 07:43:34.773413 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b773018 RNG=0x9cb75018 Jul 2 07:43:34.773420 kernel: random: crng init done Jul 2 07:43:34.773426 kernel: SMBIOS 2.8 present. Jul 2 07:43:34.773433 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015 Jul 2 07:43:34.773439 kernel: Hypervisor detected: KVM Jul 2 07:43:34.773445 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 2 07:43:34.773452 kernel: kvm-clock: cpu 0, msr 2a192001, primary cpu clock Jul 2 07:43:34.773458 kernel: kvm-clock: using sched offset of 4253428509 cycles Jul 2 07:43:34.773465 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 2 07:43:34.773471 kernel: tsc: Detected 2794.748 MHz processor Jul 2 07:43:34.773479 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 2 07:43:34.773486 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 2 07:43:34.773492 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Jul 2 07:43:34.773499 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 2 07:43:34.773505 kernel: Using GB pages for direct mapping Jul 2 07:43:34.773512 kernel: Secure boot disabled Jul 2 07:43:34.773518 kernel: ACPI: Early table checksum verification disabled Jul 2 07:43:34.773524 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Jul 2 07:43:34.773531 kernel: ACPI: XSDT 0x000000009CB7D0E8 00004C (v01 BOCHS BXPC 00000001 01000013) Jul 2 07:43:34.773539 kernel: ACPI: FACP 0x000000009CB7A000 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:43:34.773545 kernel: ACPI: DSDT 0x000000009CB7B000 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:43:34.773551 kernel: ACPI: FACS 0x000000009CBDD000 000040 Jul 2 07:43:34.773558 kernel: ACPI: APIC 0x000000009CB79000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:43:34.773564 kernel: ACPI: HPET 0x000000009CB78000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:43:34.773571 kernel: ACPI: WAET 0x000000009CB77000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:43:34.773577 kernel: ACPI: BGRT 0x000000009CB76000 000038 (v01 INTEL EDK2 00000002 01000013) Jul 2 07:43:34.773584 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb7a000-0x9cb7a073] Jul 2 07:43:34.773598 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7b000-0x9cb7ca38] Jul 2 07:43:34.773606 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Jul 2 07:43:34.773612 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb79000-0x9cb7908f] Jul 2 07:43:34.773618 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb78000-0x9cb78037] Jul 2 07:43:34.773625 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb77000-0x9cb77027] Jul 2 07:43:34.773631 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb76000-0x9cb76037] Jul 2 07:43:34.773638 kernel: No NUMA configuration found Jul 2 07:43:34.773644 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Jul 2 07:43:34.773651 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Jul 2 07:43:34.773657 kernel: Zone ranges: Jul 2 07:43:34.773665 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 2 07:43:34.773671 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Jul 2 07:43:34.773678 kernel: Normal empty Jul 2 07:43:34.773684 kernel: Movable zone start for each node Jul 2 07:43:34.773690 kernel: Early memory node ranges Jul 2 07:43:34.773697 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jul 2 07:43:34.773704 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Jul 2 07:43:34.773710 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Jul 2 07:43:34.773716 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Jul 2 07:43:34.773724 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Jul 2 07:43:34.773730 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Jul 2 07:43:34.773737 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Jul 2 07:43:34.773743 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 07:43:34.773750 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jul 2 07:43:34.773756 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Jul 2 07:43:34.773762 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 07:43:34.773769 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Jul 2 07:43:34.773775 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Jul 2 07:43:34.773783 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Jul 2 07:43:34.773789 kernel: ACPI: PM-Timer IO Port: 0xb008 Jul 2 07:43:34.773795 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 2 07:43:34.773802 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 2 07:43:34.773808 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 2 07:43:34.773815 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 2 07:43:34.773821 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 2 07:43:34.773828 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 2 07:43:34.773834 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 2 07:43:34.773842 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 2 07:43:34.773848 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 2 07:43:34.773854 kernel: TSC deadline timer available Jul 2 07:43:34.773861 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 2 07:43:34.773867 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 2 07:43:34.773873 kernel: kvm-guest: setup PV sched yield Jul 2 07:43:34.773880 kernel: [mem 0x9d000000-0xffffffff] available for PCI devices Jul 2 07:43:34.773886 kernel: Booting paravirtualized kernel on KVM Jul 2 07:43:34.773893 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 2 07:43:34.773899 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 2 07:43:34.773907 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 2 07:43:34.773913 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 2 07:43:34.773924 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 2 07:43:34.773932 kernel: kvm-guest: setup async PF for cpu 0 Jul 2 07:43:34.773939 kernel: kvm-guest: stealtime: cpu 0, msr 9b01c0c0 Jul 2 07:43:34.773945 kernel: kvm-guest: PV spinlocks enabled Jul 2 07:43:34.773952 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 2 07:43:34.773959 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Jul 2 07:43:34.773966 kernel: Policy zone: DMA32 Jul 2 07:43:34.773974 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:43:34.773981 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 07:43:34.773989 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 2 07:43:34.773996 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 07:43:34.774003 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 07:43:34.774010 kernel: Memory: 2398444K/2567000K available (12294K kernel code, 2276K rwdata, 13712K rodata, 47444K init, 4144K bss, 168296K reserved, 0K cma-reserved) Jul 2 07:43:34.774018 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 2 07:43:34.774025 kernel: ftrace: allocating 34514 entries in 135 pages Jul 2 07:43:34.774032 kernel: ftrace: allocated 135 pages with 4 groups Jul 2 07:43:34.774038 kernel: rcu: Hierarchical RCU implementation. Jul 2 07:43:34.774046 kernel: rcu: RCU event tracing is enabled. Jul 2 07:43:34.774053 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 2 07:43:34.774070 kernel: Rude variant of Tasks RCU enabled. Jul 2 07:43:34.774077 kernel: Tracing variant of Tasks RCU enabled. Jul 2 07:43:34.774084 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 07:43:34.774092 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 2 07:43:34.774099 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 2 07:43:34.774106 kernel: Console: colour dummy device 80x25 Jul 2 07:43:34.774113 kernel: printk: console [ttyS0] enabled Jul 2 07:43:34.774119 kernel: ACPI: Core revision 20210730 Jul 2 07:43:34.774126 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 2 07:43:34.774134 kernel: APIC: Switch to symmetric I/O mode setup Jul 2 07:43:34.774140 kernel: x2apic enabled Jul 2 07:43:34.774147 kernel: Switched APIC routing to physical x2apic. Jul 2 07:43:34.774154 kernel: kvm-guest: setup PV IPIs Jul 2 07:43:34.774162 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 2 07:43:34.774169 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 2 07:43:34.774176 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Jul 2 07:43:34.774183 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 2 07:43:34.774189 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 2 07:43:34.774196 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 2 07:43:34.774203 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 2 07:43:34.774210 kernel: Spectre V2 : Mitigation: Retpolines Jul 2 07:43:34.774217 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Jul 2 07:43:34.774225 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Jul 2 07:43:34.774232 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 2 07:43:34.774239 kernel: RETBleed: Mitigation: untrained return thunk Jul 2 07:43:34.774246 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 2 07:43:34.774253 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 2 07:43:34.774260 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 2 07:43:34.774267 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 2 07:43:34.774273 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 2 07:43:34.774281 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 2 07:43:34.774288 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 2 07:43:34.774295 kernel: Freeing SMP alternatives memory: 32K Jul 2 07:43:34.774302 kernel: pid_max: default: 32768 minimum: 301 Jul 2 07:43:34.774309 kernel: LSM: Security Framework initializing Jul 2 07:43:34.774315 kernel: SELinux: Initializing. Jul 2 07:43:34.774322 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 07:43:34.774329 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 07:43:34.774336 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 2 07:43:34.774344 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 2 07:43:34.774351 kernel: ... version: 0 Jul 2 07:43:34.774357 kernel: ... bit width: 48 Jul 2 07:43:34.774364 kernel: ... generic registers: 6 Jul 2 07:43:34.774371 kernel: ... value mask: 0000ffffffffffff Jul 2 07:43:34.774378 kernel: ... max period: 00007fffffffffff Jul 2 07:43:34.774384 kernel: ... fixed-purpose events: 0 Jul 2 07:43:34.774391 kernel: ... event mask: 000000000000003f Jul 2 07:43:34.774398 kernel: signal: max sigframe size: 1776 Jul 2 07:43:34.774406 kernel: rcu: Hierarchical SRCU implementation. Jul 2 07:43:34.774412 kernel: smp: Bringing up secondary CPUs ... Jul 2 07:43:34.774419 kernel: x86: Booting SMP configuration: Jul 2 07:43:34.774426 kernel: .... node #0, CPUs: #1 Jul 2 07:43:34.774432 kernel: kvm-clock: cpu 1, msr 2a192041, secondary cpu clock Jul 2 07:43:34.774439 kernel: kvm-guest: setup async PF for cpu 1 Jul 2 07:43:34.774446 kernel: kvm-guest: stealtime: cpu 1, msr 9b09c0c0 Jul 2 07:43:34.774453 kernel: #2 Jul 2 07:43:34.774460 kernel: kvm-clock: cpu 2, msr 2a192081, secondary cpu clock Jul 2 07:43:34.774466 kernel: kvm-guest: setup async PF for cpu 2 Jul 2 07:43:34.774474 kernel: kvm-guest: stealtime: cpu 2, msr 9b11c0c0 Jul 2 07:43:34.774481 kernel: #3 Jul 2 07:43:34.774488 kernel: kvm-clock: cpu 3, msr 2a1920c1, secondary cpu clock Jul 2 07:43:34.774494 kernel: kvm-guest: setup async PF for cpu 3 Jul 2 07:43:34.774501 kernel: kvm-guest: stealtime: cpu 3, msr 9b19c0c0 Jul 2 07:43:34.774508 kernel: smp: Brought up 1 node, 4 CPUs Jul 2 07:43:34.774515 kernel: smpboot: Max logical packages: 1 Jul 2 07:43:34.774522 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Jul 2 07:43:34.774528 kernel: devtmpfs: initialized Jul 2 07:43:34.774536 kernel: x86/mm: Memory block size: 128MB Jul 2 07:43:34.774543 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Jul 2 07:43:34.774550 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Jul 2 07:43:34.774557 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Jul 2 07:43:34.774564 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Jul 2 07:43:34.774571 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Jul 2 07:43:34.774578 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 07:43:34.774585 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 2 07:43:34.774599 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 07:43:34.774608 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 07:43:34.774615 kernel: audit: initializing netlink subsys (disabled) Jul 2 07:43:34.774622 kernel: audit: type=2000 audit(1719906214.975:1): state=initialized audit_enabled=0 res=1 Jul 2 07:43:34.774628 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 07:43:34.774635 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 2 07:43:34.774642 kernel: cpuidle: using governor menu Jul 2 07:43:34.774649 kernel: ACPI: bus type PCI registered Jul 2 07:43:34.774655 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 07:43:34.774662 kernel: dca service started, version 1.12.1 Jul 2 07:43:34.774670 kernel: PCI: Using configuration type 1 for base access Jul 2 07:43:34.774677 kernel: PCI: Using configuration type 1 for extended access Jul 2 07:43:34.774684 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 2 07:43:34.774691 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 2 07:43:34.774697 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 07:43:34.774704 kernel: ACPI: Added _OSI(Module Device) Jul 2 07:43:34.774711 kernel: ACPI: Added _OSI(Processor Device) Jul 2 07:43:34.774718 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 07:43:34.774724 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 07:43:34.774732 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 07:43:34.774739 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 07:43:34.774746 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 07:43:34.774753 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 2 07:43:34.774760 kernel: ACPI: Interpreter enabled Jul 2 07:43:34.774766 kernel: ACPI: PM: (supports S0 S3 S5) Jul 2 07:43:34.774773 kernel: ACPI: Using IOAPIC for interrupt routing Jul 2 07:43:34.774780 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 2 07:43:34.774787 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Jul 2 07:43:34.774795 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 2 07:43:34.774914 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 2 07:43:34.774925 kernel: acpiphp: Slot [3] registered Jul 2 07:43:34.774932 kernel: acpiphp: Slot [4] registered Jul 2 07:43:34.774939 kernel: acpiphp: Slot [5] registered Jul 2 07:43:34.774946 kernel: acpiphp: Slot [6] registered Jul 2 07:43:34.774952 kernel: acpiphp: Slot [7] registered Jul 2 07:43:34.774959 kernel: acpiphp: Slot [8] registered Jul 2 07:43:34.774968 kernel: acpiphp: Slot [9] registered Jul 2 07:43:34.774975 kernel: acpiphp: Slot [10] registered Jul 2 07:43:34.774982 kernel: acpiphp: Slot [11] registered Jul 2 07:43:34.774989 kernel: acpiphp: Slot [12] registered Jul 2 07:43:34.774995 kernel: acpiphp: Slot [13] registered Jul 2 07:43:34.775002 kernel: acpiphp: Slot [14] registered Jul 2 07:43:34.775009 kernel: acpiphp: Slot [15] registered Jul 2 07:43:34.775016 kernel: acpiphp: Slot [16] registered Jul 2 07:43:34.775022 kernel: acpiphp: Slot [17] registered Jul 2 07:43:34.775029 kernel: acpiphp: Slot [18] registered Jul 2 07:43:34.775037 kernel: acpiphp: Slot [19] registered Jul 2 07:43:34.775044 kernel: acpiphp: Slot [20] registered Jul 2 07:43:34.775050 kernel: acpiphp: Slot [21] registered Jul 2 07:43:34.775068 kernel: acpiphp: Slot [22] registered Jul 2 07:43:34.775075 kernel: acpiphp: Slot [23] registered Jul 2 07:43:34.775082 kernel: acpiphp: Slot [24] registered Jul 2 07:43:34.775089 kernel: acpiphp: Slot [25] registered Jul 2 07:43:34.775095 kernel: acpiphp: Slot [26] registered Jul 2 07:43:34.775102 kernel: acpiphp: Slot [27] registered Jul 2 07:43:34.775110 kernel: acpiphp: Slot [28] registered Jul 2 07:43:34.775117 kernel: acpiphp: Slot [29] registered Jul 2 07:43:34.775123 kernel: acpiphp: Slot [30] registered Jul 2 07:43:34.775130 kernel: acpiphp: Slot [31] registered Jul 2 07:43:34.775137 kernel: PCI host bridge to bus 0000:00 Jul 2 07:43:34.775215 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 2 07:43:34.775280 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 2 07:43:34.775342 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 2 07:43:34.775407 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Jul 2 07:43:34.775469 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0x87fffffff window] Jul 2 07:43:34.775530 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 2 07:43:34.775623 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Jul 2 07:43:34.775701 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Jul 2 07:43:34.775778 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Jul 2 07:43:34.775851 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Jul 2 07:43:34.775921 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 2 07:43:34.775989 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 2 07:43:34.776071 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 2 07:43:34.776142 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 2 07:43:34.776218 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Jul 2 07:43:34.776288 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Jul 2 07:43:34.776360 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Jul 2 07:43:34.776440 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Jul 2 07:43:34.776510 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Jul 2 07:43:34.776577 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xc1043000-0xc1043fff] Jul 2 07:43:34.776657 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Jul 2 07:43:34.776724 kernel: pci 0000:00:02.0: BAR 0: assigned to efifb Jul 2 07:43:34.776794 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 2 07:43:34.777646 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Jul 2 07:43:34.777753 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc0a0-0xc0bf] Jul 2 07:43:34.777828 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Jul 2 07:43:34.777897 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Jul 2 07:43:34.777975 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Jul 2 07:43:34.778045 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Jul 2 07:43:34.778140 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Jul 2 07:43:34.778213 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Jul 2 07:43:34.778289 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Jul 2 07:43:34.778358 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] Jul 2 07:43:34.778425 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xc1040000-0xc1040fff] Jul 2 07:43:34.778493 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Jul 2 07:43:34.778560 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Jul 2 07:43:34.778570 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 2 07:43:34.778580 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 2 07:43:34.778595 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 2 07:43:34.778603 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 2 07:43:34.778610 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Jul 2 07:43:34.778618 kernel: iommu: Default domain type: Translated Jul 2 07:43:34.778625 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 2 07:43:34.778697 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Jul 2 07:43:34.778765 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 2 07:43:34.778831 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Jul 2 07:43:34.778843 kernel: vgaarb: loaded Jul 2 07:43:34.778851 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 07:43:34.778858 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 07:43:34.778865 kernel: PTP clock support registered Jul 2 07:43:34.778872 kernel: Registered efivars operations Jul 2 07:43:34.778879 kernel: PCI: Using ACPI for IRQ routing Jul 2 07:43:34.778887 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 2 07:43:34.778894 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Jul 2 07:43:34.778901 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Jul 2 07:43:34.778910 kernel: e820: reserve RAM buffer [mem 0x9b3bd018-0x9bffffff] Jul 2 07:43:34.778917 kernel: e820: reserve RAM buffer [mem 0x9b3fa018-0x9bffffff] Jul 2 07:43:34.778924 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Jul 2 07:43:34.778931 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Jul 2 07:43:34.778938 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 2 07:43:34.778945 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 2 07:43:34.778953 kernel: clocksource: Switched to clocksource kvm-clock Jul 2 07:43:34.778960 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 07:43:34.778970 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 07:43:34.778977 kernel: pnp: PnP ACPI init Jul 2 07:43:34.779053 kernel: pnp 00:02: [dma 2] Jul 2 07:43:34.779076 kernel: pnp: PnP ACPI: found 6 devices Jul 2 07:43:34.779083 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 2 07:43:34.779090 kernel: NET: Registered PF_INET protocol family Jul 2 07:43:34.779098 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 2 07:43:34.779105 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 2 07:43:34.779113 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 07:43:34.779122 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 07:43:34.779130 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 2 07:43:34.779137 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 2 07:43:34.779144 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 07:43:34.779152 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 07:43:34.779159 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 07:43:34.779167 kernel: NET: Registered PF_XDP protocol family Jul 2 07:43:34.779239 kernel: pci 0000:00:05.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Jul 2 07:43:34.779319 kernel: pci 0000:00:05.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Jul 2 07:43:34.779388 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 2 07:43:34.779450 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 2 07:43:34.779509 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 2 07:43:34.779655 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Jul 2 07:43:34.779722 kernel: pci_bus 0000:00: resource 8 [mem 0x800000000-0x87fffffff window] Jul 2 07:43:34.779795 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Jul 2 07:43:34.779866 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 2 07:43:34.779938 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Jul 2 07:43:34.779947 kernel: PCI: CLS 0 bytes, default 64 Jul 2 07:43:34.779955 kernel: Initialise system trusted keyrings Jul 2 07:43:34.779962 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 2 07:43:34.779970 kernel: Key type asymmetric registered Jul 2 07:43:34.779977 kernel: Asymmetric key parser 'x509' registered Jul 2 07:43:34.779985 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 07:43:34.779992 kernel: io scheduler mq-deadline registered Jul 2 07:43:34.780002 kernel: io scheduler kyber registered Jul 2 07:43:34.780009 kernel: io scheduler bfq registered Jul 2 07:43:34.780017 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 2 07:43:34.780025 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Jul 2 07:43:34.780033 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Jul 2 07:43:34.780040 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Jul 2 07:43:34.780048 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 07:43:34.780066 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 2 07:43:34.780074 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 2 07:43:34.780084 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 2 07:43:34.780091 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 2 07:43:34.780162 kernel: rtc_cmos 00:05: RTC can wake from S4 Jul 2 07:43:34.780176 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 2 07:43:34.780236 kernel: rtc_cmos 00:05: registered as rtc0 Jul 2 07:43:34.780301 kernel: rtc_cmos 00:05: setting system clock to 2024-07-02T07:43:34 UTC (1719906214) Jul 2 07:43:34.780363 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 2 07:43:34.780372 kernel: efifb: probing for efifb Jul 2 07:43:34.780380 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Jul 2 07:43:34.780387 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jul 2 07:43:34.780395 kernel: efifb: scrolling: redraw Jul 2 07:43:34.780402 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 2 07:43:34.780411 kernel: Console: switching to colour frame buffer device 160x50 Jul 2 07:43:34.780419 kernel: fb0: EFI VGA frame buffer device Jul 2 07:43:34.780428 kernel: pstore: Registered efi as persistent store backend Jul 2 07:43:34.780435 kernel: NET: Registered PF_INET6 protocol family Jul 2 07:43:34.780443 kernel: Segment Routing with IPv6 Jul 2 07:43:34.780450 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 07:43:34.780458 kernel: NET: Registered PF_PACKET protocol family Jul 2 07:43:34.780465 kernel: Key type dns_resolver registered Jul 2 07:43:34.780472 kernel: IPI shorthand broadcast: enabled Jul 2 07:43:34.780481 kernel: sched_clock: Marking stable (432068818, 143473786)->(619174914, -43632310) Jul 2 07:43:34.780488 kernel: registered taskstats version 1 Jul 2 07:43:34.780497 kernel: Loading compiled-in X.509 certificates Jul 2 07:43:34.780505 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: a1ce693884775675566f1ed116e36d15950b9a42' Jul 2 07:43:34.780512 kernel: Key type .fscrypt registered Jul 2 07:43:34.780519 kernel: Key type fscrypt-provisioning registered Jul 2 07:43:34.780527 kernel: pstore: Using crash dump compression: deflate Jul 2 07:43:34.780534 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 07:43:34.780542 kernel: ima: Allocated hash algorithm: sha1 Jul 2 07:43:34.780550 kernel: ima: No architecture policies found Jul 2 07:43:34.780557 kernel: clk: Disabling unused clocks Jul 2 07:43:34.780566 kernel: Freeing unused kernel image (initmem) memory: 47444K Jul 2 07:43:34.780573 kernel: Write protecting the kernel read-only data: 28672k Jul 2 07:43:34.780581 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 2 07:43:34.780596 kernel: Freeing unused kernel image (rodata/data gap) memory: 624K Jul 2 07:43:34.780604 kernel: Run /init as init process Jul 2 07:43:34.780611 kernel: with arguments: Jul 2 07:43:34.780618 kernel: /init Jul 2 07:43:34.780626 kernel: with environment: Jul 2 07:43:34.780633 kernel: HOME=/ Jul 2 07:43:34.780642 kernel: TERM=linux Jul 2 07:43:34.780649 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 07:43:34.780660 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:43:34.780670 systemd[1]: Detected virtualization kvm. Jul 2 07:43:34.780678 systemd[1]: Detected architecture x86-64. Jul 2 07:43:34.780686 systemd[1]: Running in initrd. Jul 2 07:43:34.780694 systemd[1]: No hostname configured, using default hostname. Jul 2 07:43:34.780701 systemd[1]: Hostname set to . Jul 2 07:43:34.780711 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:43:34.780719 systemd[1]: Queued start job for default target initrd.target. Jul 2 07:43:34.780726 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:43:34.780735 systemd[1]: Reached target cryptsetup.target. Jul 2 07:43:34.780742 systemd[1]: Reached target paths.target. Jul 2 07:43:34.780750 systemd[1]: Reached target slices.target. Jul 2 07:43:34.780758 systemd[1]: Reached target swap.target. Jul 2 07:43:34.780765 systemd[1]: Reached target timers.target. Jul 2 07:43:34.780775 systemd[1]: Listening on iscsid.socket. Jul 2 07:43:34.780783 systemd[1]: Listening on iscsiuio.socket. Jul 2 07:43:34.780791 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 07:43:34.780799 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 07:43:34.780807 systemd[1]: Listening on systemd-journald.socket. Jul 2 07:43:34.780815 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:43:34.780823 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:43:34.780832 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:43:34.780840 systemd[1]: Reached target sockets.target. Jul 2 07:43:34.780848 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:43:34.780855 systemd[1]: Finished network-cleanup.service. Jul 2 07:43:34.780863 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 07:43:34.780871 systemd[1]: Starting systemd-journald.service... Jul 2 07:43:34.780879 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:43:34.780887 systemd[1]: Starting systemd-resolved.service... Jul 2 07:43:34.780895 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 07:43:34.780904 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:43:34.780912 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 07:43:34.780921 kernel: audit: type=1130 audit(1719906214.771:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.780930 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 07:43:34.780938 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 07:43:34.780946 kernel: audit: type=1130 audit(1719906214.779:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.780954 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 07:43:34.780965 systemd-journald[197]: Journal started Jul 2 07:43:34.781012 systemd-journald[197]: Runtime Journal (/run/log/journal/1ed6cb8c199f4f569ff635d88647ee23) is 6.0M, max 48.4M, 42.4M free. Jul 2 07:43:34.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.785079 systemd[1]: Started systemd-journald.service. Jul 2 07:43:34.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.788300 systemd-modules-load[198]: Inserted module 'overlay' Jul 2 07:43:34.789267 kernel: audit: type=1130 audit(1719906214.784:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.789387 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 07:43:34.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.795087 kernel: audit: type=1130 audit(1719906214.791:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.800283 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 07:43:34.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.803281 systemd-resolved[199]: Positive Trust Anchors: Jul 2 07:43:34.805476 kernel: audit: type=1130 audit(1719906214.801:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.803294 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:43:34.803321 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:43:34.805451 systemd-resolved[199]: Defaulting to hostname 'linux'. Jul 2 07:43:34.813754 systemd[1]: Starting dracut-cmdline.service... Jul 2 07:43:34.815296 systemd[1]: Started systemd-resolved.service. Jul 2 07:43:34.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.817205 systemd[1]: Reached target nss-lookup.target. Jul 2 07:43:34.821509 kernel: audit: type=1130 audit(1719906214.816:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.822134 dracut-cmdline[217]: dracut-dracut-053 Jul 2 07:43:34.824563 dracut-cmdline[217]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:43:34.829616 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 07:43:34.830548 systemd-modules-load[198]: Inserted module 'br_netfilter' Jul 2 07:43:34.831495 kernel: Bridge firewalling registered Jul 2 07:43:34.847084 kernel: SCSI subsystem initialized Jul 2 07:43:34.859149 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 07:43:34.859187 kernel: device-mapper: uevent: version 1.0.3 Jul 2 07:43:34.859197 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 07:43:34.861758 systemd-modules-load[198]: Inserted module 'dm_multipath' Jul 2 07:43:34.862406 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:43:34.864182 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:43:34.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.869104 kernel: audit: type=1130 audit(1719906214.863:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.873474 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:43:34.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.878085 kernel: audit: type=1130 audit(1719906214.874:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.884074 kernel: Loading iSCSI transport class v2.0-870. Jul 2 07:43:34.900080 kernel: iscsi: registered transport (tcp) Jul 2 07:43:34.920454 kernel: iscsi: registered transport (qla4xxx) Jul 2 07:43:34.920486 kernel: QLogic iSCSI HBA Driver Jul 2 07:43:34.945534 systemd[1]: Finished dracut-cmdline.service. Jul 2 07:43:34.951199 kernel: audit: type=1130 audit(1719906214.946:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:34.947174 systemd[1]: Starting dracut-pre-udev.service... Jul 2 07:43:34.992084 kernel: raid6: avx2x4 gen() 30804 MB/s Jul 2 07:43:35.009078 kernel: raid6: avx2x4 xor() 8308 MB/s Jul 2 07:43:35.026076 kernel: raid6: avx2x2 gen() 31798 MB/s Jul 2 07:43:35.043076 kernel: raid6: avx2x2 xor() 18759 MB/s Jul 2 07:43:35.060079 kernel: raid6: avx2x1 gen() 24807 MB/s Jul 2 07:43:35.077076 kernel: raid6: avx2x1 xor() 15031 MB/s Jul 2 07:43:35.094075 kernel: raid6: sse2x4 gen() 14796 MB/s Jul 2 07:43:35.111090 kernel: raid6: sse2x4 xor() 7538 MB/s Jul 2 07:43:35.128093 kernel: raid6: sse2x2 gen() 15612 MB/s Jul 2 07:43:35.145080 kernel: raid6: sse2x2 xor() 9517 MB/s Jul 2 07:43:35.162077 kernel: raid6: sse2x1 gen() 12363 MB/s Jul 2 07:43:35.179472 kernel: raid6: sse2x1 xor() 7774 MB/s Jul 2 07:43:35.179491 kernel: raid6: using algorithm avx2x2 gen() 31798 MB/s Jul 2 07:43:35.179500 kernel: raid6: .... xor() 18759 MB/s, rmw enabled Jul 2 07:43:35.180191 kernel: raid6: using avx2x2 recovery algorithm Jul 2 07:43:35.192077 kernel: xor: automatically using best checksumming function avx Jul 2 07:43:35.283085 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 2 07:43:35.290388 systemd[1]: Finished dracut-pre-udev.service. Jul 2 07:43:35.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:35.291000 audit: BPF prog-id=7 op=LOAD Jul 2 07:43:35.291000 audit: BPF prog-id=8 op=LOAD Jul 2 07:43:35.292428 systemd[1]: Starting systemd-udevd.service... Jul 2 07:43:35.303786 systemd-udevd[399]: Using default interface naming scheme 'v252'. Jul 2 07:43:35.307498 systemd[1]: Started systemd-udevd.service. Jul 2 07:43:35.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:35.308829 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 07:43:35.317777 dracut-pre-trigger[407]: rd.md=0: removing MD RAID activation Jul 2 07:43:35.339589 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 07:43:35.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:35.341850 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:43:35.373175 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:43:35.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:35.398308 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 2 07:43:35.400074 kernel: cryptd: max_cpu_qlen set to 1000 Jul 2 07:43:35.408075 kernel: libata version 3.00 loaded. Jul 2 07:43:35.418093 kernel: AVX2 version of gcm_enc/dec engaged. Jul 2 07:43:35.418132 kernel: AES CTR mode by8 optimization enabled Jul 2 07:43:35.424763 kernel: ata_piix 0000:00:01.1: version 2.13 Jul 2 07:43:35.426972 kernel: scsi host0: ata_piix Jul 2 07:43:35.427026 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 2 07:43:35.427041 kernel: GPT:9289727 != 19775487 Jul 2 07:43:35.427049 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 2 07:43:35.427093 kernel: GPT:9289727 != 19775487 Jul 2 07:43:35.427102 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 07:43:35.427110 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 07:43:35.432090 kernel: scsi host1: ata_piix Jul 2 07:43:35.432272 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Jul 2 07:43:35.432286 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Jul 2 07:43:35.446081 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (452) Jul 2 07:43:35.447288 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 07:43:35.455487 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 07:43:35.456554 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 07:43:35.461588 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 07:43:35.465580 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:43:35.467172 systemd[1]: Starting disk-uuid.service... Jul 2 07:43:35.473326 disk-uuid[522]: Primary Header is updated. Jul 2 07:43:35.473326 disk-uuid[522]: Secondary Entries is updated. Jul 2 07:43:35.473326 disk-uuid[522]: Secondary Header is updated. Jul 2 07:43:35.476821 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 07:43:35.589147 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 2 07:43:35.591171 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 2 07:43:35.622313 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 2 07:43:35.622640 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 2 07:43:35.640090 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Jul 2 07:43:36.482897 disk-uuid[523]: The operation has completed successfully. Jul 2 07:43:36.484072 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 07:43:36.506653 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 07:43:36.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.506745 systemd[1]: Finished disk-uuid.service. Jul 2 07:43:36.510959 systemd[1]: Starting verity-setup.service... Jul 2 07:43:36.523083 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 2 07:43:36.542556 systemd[1]: Found device dev-mapper-usr.device. Jul 2 07:43:36.545117 systemd[1]: Mounting sysusr-usr.mount... Jul 2 07:43:36.546580 systemd[1]: Finished verity-setup.service. Jul 2 07:43:36.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.615718 systemd[1]: Mounted sysusr-usr.mount. Jul 2 07:43:36.618133 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 07:43:36.616693 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 07:43:36.617292 systemd[1]: Starting ignition-setup.service... Jul 2 07:43:36.618657 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 07:43:36.627394 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:43:36.627417 kernel: BTRFS info (device vda6): using free space tree Jul 2 07:43:36.627427 kernel: BTRFS info (device vda6): has skinny extents Jul 2 07:43:36.635756 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 07:43:36.644486 systemd[1]: Finished ignition-setup.service. Jul 2 07:43:36.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.645650 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 07:43:36.685528 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 07:43:36.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.687000 audit: BPF prog-id=9 op=LOAD Jul 2 07:43:36.687919 systemd[1]: Starting systemd-networkd.service... Jul 2 07:43:36.697154 ignition[647]: Ignition 2.14.0 Jul 2 07:43:36.697163 ignition[647]: Stage: fetch-offline Jul 2 07:43:36.697201 ignition[647]: no configs at "/usr/lib/ignition/base.d" Jul 2 07:43:36.697208 ignition[647]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:43:36.697290 ignition[647]: parsed url from cmdline: "" Jul 2 07:43:36.697293 ignition[647]: no config URL provided Jul 2 07:43:36.697298 ignition[647]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 07:43:36.697303 ignition[647]: no config at "/usr/lib/ignition/user.ign" Jul 2 07:43:36.697910 ignition[647]: op(1): [started] loading QEMU firmware config module Jul 2 07:43:36.697916 ignition[647]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 2 07:43:36.703275 ignition[647]: op(1): [finished] loading QEMU firmware config module Jul 2 07:43:36.709770 systemd-networkd[714]: lo: Link UP Jul 2 07:43:36.709778 systemd-networkd[714]: lo: Gained carrier Jul 2 07:43:36.711656 systemd-networkd[714]: Enumeration completed Jul 2 07:43:36.711835 systemd-networkd[714]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:43:36.711924 systemd[1]: Started systemd-networkd.service. Jul 2 07:43:36.713071 systemd-networkd[714]: eth0: Link UP Jul 2 07:43:36.713074 systemd-networkd[714]: eth0: Gained carrier Jul 2 07:43:36.713927 systemd[1]: Reached target network.target. Jul 2 07:43:36.719119 systemd[1]: Starting iscsiuio.service... Jul 2 07:43:36.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.735761 systemd[1]: Started iscsiuio.service. Jul 2 07:43:36.737757 systemd[1]: Starting iscsid.service... Jul 2 07:43:36.740964 iscsid[722]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:43:36.740964 iscsid[722]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 07:43:36.740964 iscsid[722]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 07:43:36.740964 iscsid[722]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 07:43:36.740964 iscsid[722]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:43:36.740964 iscsid[722]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 07:43:36.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.744110 systemd[1]: Started iscsid.service. Jul 2 07:43:36.751277 systemd[1]: Starting dracut-initqueue.service... Jul 2 07:43:36.768023 systemd[1]: Finished dracut-initqueue.service. Jul 2 07:43:36.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.770081 systemd[1]: Reached target remote-fs-pre.target. Jul 2 07:43:36.771093 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:43:36.772894 systemd[1]: Reached target remote-fs.target. Jul 2 07:43:36.775574 systemd[1]: Starting dracut-pre-mount.service... Jul 2 07:43:36.781755 ignition[647]: parsing config with SHA512: dad651e4706b4ddc6d9922cfaf65425eb51a8e85b6c53e2b0f4d325bb03014b0b4b60d1d3e51dde72755889901fc58c0934c425884ebe2990b0d5c685f356da7 Jul 2 07:43:36.782386 systemd[1]: Finished dracut-pre-mount.service. Jul 2 07:43:36.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.790736 unknown[647]: fetched base config from "system" Jul 2 07:43:36.790745 unknown[647]: fetched user config from "qemu" Jul 2 07:43:36.791141 ignition[647]: fetch-offline: fetch-offline passed Jul 2 07:43:36.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.792006 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 07:43:36.791186 ignition[647]: Ignition finished successfully Jul 2 07:43:36.792140 systemd-networkd[714]: eth0: DHCPv4 address 10.0.0.39/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 2 07:43:36.793474 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 2 07:43:36.794259 systemd[1]: Starting ignition-kargs.service... Jul 2 07:43:36.807819 ignition[736]: Ignition 2.14.0 Jul 2 07:43:36.807829 ignition[736]: Stage: kargs Jul 2 07:43:36.807913 ignition[736]: no configs at "/usr/lib/ignition/base.d" Jul 2 07:43:36.807920 ignition[736]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:43:36.811775 ignition[736]: kargs: kargs passed Jul 2 07:43:36.811816 ignition[736]: Ignition finished successfully Jul 2 07:43:36.814031 systemd[1]: Finished ignition-kargs.service. Jul 2 07:43:36.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.815319 systemd[1]: Starting ignition-disks.service... Jul 2 07:43:36.823730 ignition[742]: Ignition 2.14.0 Jul 2 07:43:36.823738 ignition[742]: Stage: disks Jul 2 07:43:36.823844 ignition[742]: no configs at "/usr/lib/ignition/base.d" Jul 2 07:43:36.823857 ignition[742]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:43:36.825114 ignition[742]: disks: disks passed Jul 2 07:43:36.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.826419 systemd[1]: Finished ignition-disks.service. Jul 2 07:43:36.825156 ignition[742]: Ignition finished successfully Jul 2 07:43:36.826872 systemd[1]: Reached target initrd-root-device.target. Jul 2 07:43:36.827099 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:43:36.830350 systemd[1]: Reached target local-fs.target. Jul 2 07:43:36.831881 systemd[1]: Reached target sysinit.target. Jul 2 07:43:36.832368 systemd[1]: Reached target basic.target. Jul 2 07:43:36.840958 systemd[1]: Starting systemd-fsck-root.service... Jul 2 07:43:36.856486 systemd-fsck[750]: ROOT: clean, 614/553520 files, 56020/553472 blocks Jul 2 07:43:36.870190 systemd[1]: Finished systemd-fsck-root.service. Jul 2 07:43:36.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.873559 systemd[1]: Mounting sysroot.mount... Jul 2 07:43:36.887142 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 07:43:36.887478 systemd[1]: Mounted sysroot.mount. Jul 2 07:43:36.889024 systemd[1]: Reached target initrd-root-fs.target. Jul 2 07:43:36.892018 systemd[1]: Mounting sysroot-usr.mount... Jul 2 07:43:36.893760 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 2 07:43:36.893798 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 07:43:36.893822 systemd[1]: Reached target ignition-diskful.target. Jul 2 07:43:36.898618 systemd[1]: Mounted sysroot-usr.mount. Jul 2 07:43:36.901779 systemd[1]: Starting initrd-setup-root.service... Jul 2 07:43:36.906795 initrd-setup-root[760]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 07:43:36.909938 initrd-setup-root[768]: cut: /sysroot/etc/group: No such file or directory Jul 2 07:43:36.913766 initrd-setup-root[776]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 07:43:36.917617 initrd-setup-root[784]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 07:43:36.944462 systemd[1]: Finished initrd-setup-root.service. Jul 2 07:43:36.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:36.956888 systemd[1]: Starting ignition-mount.service... Jul 2 07:43:36.958525 systemd[1]: Starting sysroot-boot.service... Jul 2 07:43:36.962837 bash[801]: umount: /sysroot/usr/share/oem: not mounted. Jul 2 07:43:36.973358 ignition[803]: INFO : Ignition 2.14.0 Jul 2 07:43:36.973358 ignition[803]: INFO : Stage: mount Jul 2 07:43:36.997958 ignition[803]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 2 07:43:36.997958 ignition[803]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:43:36.997958 ignition[803]: INFO : mount: mount passed Jul 2 07:43:36.997958 ignition[803]: INFO : Ignition finished successfully Jul 2 07:43:37.002178 systemd[1]: Finished ignition-mount.service. Jul 2 07:43:37.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:37.002990 systemd[1]: Finished sysroot-boot.service. Jul 2 07:43:37.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:37.553976 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 07:43:37.563811 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (811) Jul 2 07:43:37.563839 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:43:37.563849 kernel: BTRFS info (device vda6): using free space tree Jul 2 07:43:37.564794 kernel: BTRFS info (device vda6): has skinny extents Jul 2 07:43:37.569461 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 07:43:37.572401 systemd[1]: Starting ignition-files.service... Jul 2 07:43:37.587659 ignition[831]: INFO : Ignition 2.14.0 Jul 2 07:43:37.587659 ignition[831]: INFO : Stage: files Jul 2 07:43:37.595429 ignition[831]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 2 07:43:37.595429 ignition[831]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:43:37.595429 ignition[831]: DEBUG : files: compiled without relabeling support, skipping Jul 2 07:43:37.595429 ignition[831]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 07:43:37.595429 ignition[831]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 07:43:37.601688 ignition[831]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 07:43:37.601688 ignition[831]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 07:43:37.601688 ignition[831]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 07:43:37.601688 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:43:37.601688 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 2 07:43:37.598292 unknown[831]: wrote ssh authorized keys file for user: core Jul 2 07:43:37.638303 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 2 07:43:37.808404 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:43:37.808404 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 07:43:37.812294 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.30.1-x86-64.raw: attempt #1 Jul 2 07:43:38.159864 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 2 07:43:38.571212 systemd-networkd[714]: eth0: Gained IPv6LL Jul 2 07:43:38.574903 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 2 07:43:38.577700 ignition[831]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 2 07:43:38.611656 ignition[831]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 2 07:43:38.614727 ignition[831]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 2 07:43:38.614727 ignition[831]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:43:38.614727 ignition[831]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:43:38.614727 ignition[831]: INFO : files: files passed Jul 2 07:43:38.614727 ignition[831]: INFO : Ignition finished successfully Jul 2 07:43:38.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.613002 systemd[1]: Finished ignition-files.service. Jul 2 07:43:38.615549 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 07:43:38.617296 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 07:43:38.631721 initrd-setup-root-after-ignition[856]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 2 07:43:38.617955 systemd[1]: Starting ignition-quench.service... Jul 2 07:43:38.634510 initrd-setup-root-after-ignition[859]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 07:43:38.622071 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 07:43:38.623906 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 07:43:38.623968 systemd[1]: Finished ignition-quench.service. Jul 2 07:43:38.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.625662 systemd[1]: Reached target ignition-complete.target. Jul 2 07:43:38.627158 systemd[1]: Starting initrd-parse-etc.service... Jul 2 07:43:38.637687 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 07:43:38.637764 systemd[1]: Finished initrd-parse-etc.service. Jul 2 07:43:38.639184 systemd[1]: Reached target initrd-fs.target. Jul 2 07:43:38.640647 systemd[1]: Reached target initrd.target. Jul 2 07:43:38.641438 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 07:43:38.642042 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 07:43:38.650531 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 07:43:38.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.652696 systemd[1]: Starting initrd-cleanup.service... Jul 2 07:43:38.659916 systemd[1]: Stopped target network.target. Jul 2 07:43:38.660819 systemd[1]: Stopped target nss-lookup.target. Jul 2 07:43:38.662284 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 07:43:38.663930 systemd[1]: Stopped target timers.target. Jul 2 07:43:38.665517 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 07:43:38.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.665635 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 07:43:38.667149 systemd[1]: Stopped target initrd.target. Jul 2 07:43:38.668730 systemd[1]: Stopped target basic.target. Jul 2 07:43:38.670211 systemd[1]: Stopped target ignition-complete.target. Jul 2 07:43:38.671789 systemd[1]: Stopped target ignition-diskful.target. Jul 2 07:43:38.673417 systemd[1]: Stopped target initrd-root-device.target. Jul 2 07:43:38.675158 systemd[1]: Stopped target remote-fs.target. Jul 2 07:43:38.676751 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 07:43:38.678428 systemd[1]: Stopped target sysinit.target. Jul 2 07:43:38.679978 systemd[1]: Stopped target local-fs.target. Jul 2 07:43:38.681607 systemd[1]: Stopped target local-fs-pre.target. Jul 2 07:43:38.683210 systemd[1]: Stopped target swap.target. Jul 2 07:43:38.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.684630 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 07:43:38.684765 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 07:43:38.689000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.686395 systemd[1]: Stopped target cryptsetup.target. Jul 2 07:43:38.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.687889 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 07:43:38.688016 systemd[1]: Stopped dracut-initqueue.service. Jul 2 07:43:38.689868 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 07:43:38.689953 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 07:43:38.691607 systemd[1]: Stopped target paths.target. Jul 2 07:43:38.693198 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 07:43:38.697128 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 07:43:38.698291 systemd[1]: Stopped target slices.target. Jul 2 07:43:38.699720 systemd[1]: Stopped target sockets.target. Jul 2 07:43:38.701701 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 07:43:38.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.701793 systemd[1]: Closed iscsid.socket. Jul 2 07:43:38.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.703268 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 07:43:38.703347 systemd[1]: Closed iscsiuio.socket. Jul 2 07:43:38.704656 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 07:43:38.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.704772 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 07:43:38.706352 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 07:43:38.706457 systemd[1]: Stopped ignition-files.service. Jul 2 07:43:38.708618 systemd[1]: Stopping ignition-mount.service... Jul 2 07:43:38.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.720896 ignition[872]: INFO : Ignition 2.14.0 Jul 2 07:43:38.720896 ignition[872]: INFO : Stage: umount Jul 2 07:43:38.720896 ignition[872]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 2 07:43:38.720896 ignition[872]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:43:38.720896 ignition[872]: INFO : umount: umount passed Jul 2 07:43:38.720896 ignition[872]: INFO : Ignition finished successfully Jul 2 07:43:38.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.710116 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 07:43:38.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.710228 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 07:43:38.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.712432 systemd[1]: Stopping sysroot-boot.service... Jul 2 07:43:38.713686 systemd[1]: Stopping systemd-networkd.service... Jul 2 07:43:38.715405 systemd[1]: Stopping systemd-resolved.service... Jul 2 07:43:38.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.734000 audit: BPF prog-id=6 op=UNLOAD Jul 2 07:43:38.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.717082 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 07:43:38.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.717246 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 07:43:38.718954 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 07:43:38.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.719124 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 07:43:38.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.721122 systemd-networkd[714]: eth0: DHCPv6 lease lost Jul 2 07:43:38.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.746000 audit: BPF prog-id=9 op=UNLOAD Jul 2 07:43:38.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.724048 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 07:43:38.724158 systemd[1]: Stopped systemd-resolved.service. Jul 2 07:43:38.727363 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 07:43:38.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.727451 systemd[1]: Stopped systemd-networkd.service. Jul 2 07:43:38.729262 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 07:43:38.729352 systemd[1]: Stopped ignition-mount.service. Jul 2 07:43:38.732290 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 07:43:38.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.733377 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 07:43:38.733445 systemd[1]: Finished initrd-cleanup.service. Jul 2 07:43:38.735720 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 07:43:38.735747 systemd[1]: Closed systemd-networkd.socket. Jul 2 07:43:38.736668 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 07:43:38.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.736709 systemd[1]: Stopped ignition-disks.service. Jul 2 07:43:38.737541 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 07:43:38.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.737571 systemd[1]: Stopped ignition-kargs.service. Jul 2 07:43:38.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.739462 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 07:43:38.739507 systemd[1]: Stopped ignition-setup.service. Jul 2 07:43:38.741703 systemd[1]: Stopping network-cleanup.service... Jul 2 07:43:38.743235 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 07:43:38.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.743301 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 07:43:38.745215 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 07:43:38.745248 systemd[1]: Stopped systemd-sysctl.service. Jul 2 07:43:38.746514 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 07:43:38.746544 systemd[1]: Stopped systemd-modules-load.service. Jul 2 07:43:38.748382 systemd[1]: Stopping systemd-udevd.service... Jul 2 07:43:38.751253 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 07:43:38.753986 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 07:43:38.754076 systemd[1]: Stopped network-cleanup.service. Jul 2 07:43:38.758922 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 07:43:38.759020 systemd[1]: Stopped systemd-udevd.service. Jul 2 07:43:38.761903 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 07:43:38.761935 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 07:43:38.763507 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 07:43:38.763534 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 07:43:38.765364 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 07:43:38.765396 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 07:43:38.767039 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 07:43:38.767130 systemd[1]: Stopped dracut-cmdline.service. Jul 2 07:43:38.768889 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 07:43:38.768921 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 07:43:38.771213 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 07:43:38.772386 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 07:43:38.772425 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 07:43:38.776423 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 07:43:38.776501 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 07:43:38.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.804144 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 07:43:38.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:38.804240 systemd[1]: Stopped sysroot-boot.service. Jul 2 07:43:38.805485 systemd[1]: Reached target initrd-switch-root.target. Jul 2 07:43:38.807107 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 07:43:38.807144 systemd[1]: Stopped initrd-setup-root.service. Jul 2 07:43:38.808629 systemd[1]: Starting initrd-switch-root.service... Jul 2 07:43:38.824398 systemd[1]: Switching root. Jul 2 07:43:38.842740 iscsid[722]: iscsid shutting down. Jul 2 07:43:38.843576 systemd-journald[197]: Received SIGTERM from PID 1 (systemd). Jul 2 07:43:38.843615 systemd-journald[197]: Journal stopped Jul 2 07:43:41.450390 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 07:43:41.450441 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 07:43:41.450452 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 07:43:41.450461 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 07:43:41.450470 kernel: SELinux: policy capability open_perms=1 Jul 2 07:43:41.450479 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 07:43:41.450488 kernel: SELinux: policy capability always_check_network=0 Jul 2 07:43:41.450502 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 07:43:41.450515 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 07:43:41.450527 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 07:43:41.450537 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 07:43:41.450547 systemd[1]: Successfully loaded SELinux policy in 40.780ms. Jul 2 07:43:41.450563 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.730ms. Jul 2 07:43:41.450574 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:43:41.450585 systemd[1]: Detected virtualization kvm. Jul 2 07:43:41.450595 systemd[1]: Detected architecture x86-64. Jul 2 07:43:41.450605 systemd[1]: Detected first boot. Jul 2 07:43:41.450616 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:43:41.450627 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 07:43:41.450636 systemd[1]: Populated /etc with preset unit settings. Jul 2 07:43:41.450647 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:43:41.450659 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:43:41.450671 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:43:41.450681 kernel: kauditd_printk_skb: 79 callbacks suppressed Jul 2 07:43:41.450690 kernel: audit: type=1334 audit(1719906221.285:83): prog-id=12 op=LOAD Jul 2 07:43:41.450701 kernel: audit: type=1334 audit(1719906221.285:84): prog-id=3 op=UNLOAD Jul 2 07:43:41.450710 kernel: audit: type=1334 audit(1719906221.287:85): prog-id=13 op=LOAD Jul 2 07:43:41.450722 kernel: audit: type=1334 audit(1719906221.289:86): prog-id=14 op=LOAD Jul 2 07:43:41.450731 kernel: audit: type=1334 audit(1719906221.289:87): prog-id=4 op=UNLOAD Jul 2 07:43:41.450741 kernel: audit: type=1334 audit(1719906221.289:88): prog-id=5 op=UNLOAD Jul 2 07:43:41.450750 kernel: audit: type=1334 audit(1719906221.291:89): prog-id=15 op=LOAD Jul 2 07:43:41.450758 kernel: audit: type=1334 audit(1719906221.291:90): prog-id=12 op=UNLOAD Jul 2 07:43:41.450767 kernel: audit: type=1334 audit(1719906221.293:91): prog-id=16 op=LOAD Jul 2 07:43:41.450776 kernel: audit: type=1334 audit(1719906221.295:92): prog-id=17 op=LOAD Jul 2 07:43:41.450787 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 07:43:41.450796 systemd[1]: Stopped iscsiuio.service. Jul 2 07:43:41.450807 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 07:43:41.450816 systemd[1]: Stopped iscsid.service. Jul 2 07:43:41.450827 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 07:43:41.450836 systemd[1]: Stopped initrd-switch-root.service. Jul 2 07:43:41.450848 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 07:43:41.450859 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 07:43:41.450869 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 07:43:41.450879 systemd[1]: Created slice system-getty.slice. Jul 2 07:43:41.450889 systemd[1]: Created slice system-modprobe.slice. Jul 2 07:43:41.450899 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 07:43:41.450911 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 07:43:41.450921 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 07:43:41.450931 systemd[1]: Created slice user.slice. Jul 2 07:43:41.450941 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:43:41.450951 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 07:43:41.450962 systemd[1]: Set up automount boot.automount. Jul 2 07:43:41.450971 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 07:43:41.450981 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 07:43:41.450992 systemd[1]: Stopped target initrd-fs.target. Jul 2 07:43:41.451002 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 07:43:41.451012 systemd[1]: Reached target integritysetup.target. Jul 2 07:43:41.451022 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:43:41.451033 systemd[1]: Reached target remote-fs.target. Jul 2 07:43:41.451043 systemd[1]: Reached target slices.target. Jul 2 07:43:41.451053 systemd[1]: Reached target swap.target. Jul 2 07:43:41.451075 systemd[1]: Reached target torcx.target. Jul 2 07:43:41.451086 systemd[1]: Reached target veritysetup.target. Jul 2 07:43:41.451096 systemd[1]: Listening on systemd-coredump.socket. Jul 2 07:43:41.451108 systemd[1]: Listening on systemd-initctl.socket. Jul 2 07:43:41.451118 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:43:41.451128 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:43:41.451138 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:43:41.451148 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 07:43:41.451158 systemd[1]: Mounting dev-hugepages.mount... Jul 2 07:43:41.451168 systemd[1]: Mounting dev-mqueue.mount... Jul 2 07:43:41.451178 systemd[1]: Mounting media.mount... Jul 2 07:43:41.451189 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:41.451199 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 07:43:41.451210 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 07:43:41.451220 systemd[1]: Mounting tmp.mount... Jul 2 07:43:41.451230 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 07:43:41.451240 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:43:41.451250 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:43:41.451260 systemd[1]: Starting modprobe@configfs.service... Jul 2 07:43:41.451270 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:43:41.451280 systemd[1]: Starting modprobe@drm.service... Jul 2 07:43:41.451290 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:43:41.451300 systemd[1]: Starting modprobe@fuse.service... Jul 2 07:43:41.451310 systemd[1]: Starting modprobe@loop.service... Jul 2 07:43:41.451320 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 07:43:41.451330 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 07:43:41.451340 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 07:43:41.451350 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 07:43:41.451360 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 07:43:41.451370 systemd[1]: Stopped systemd-journald.service. Jul 2 07:43:41.451381 kernel: fuse: init (API version 7.34) Jul 2 07:43:41.451391 kernel: loop: module loaded Jul 2 07:43:41.451401 systemd[1]: Starting systemd-journald.service... Jul 2 07:43:41.451419 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:43:41.451429 systemd[1]: Starting systemd-network-generator.service... Jul 2 07:43:41.451439 systemd[1]: Starting systemd-remount-fs.service... Jul 2 07:43:41.451449 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:43:41.451459 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 07:43:41.451469 systemd[1]: Stopped verity-setup.service. Jul 2 07:43:41.451479 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:41.451490 systemd[1]: Mounted dev-hugepages.mount. Jul 2 07:43:41.451500 systemd[1]: Mounted dev-mqueue.mount. Jul 2 07:43:41.451510 systemd[1]: Mounted media.mount. Jul 2 07:43:41.451521 systemd-journald[986]: Journal started Jul 2 07:43:41.451558 systemd-journald[986]: Runtime Journal (/run/log/journal/1ed6cb8c199f4f569ff635d88647ee23) is 6.0M, max 48.4M, 42.4M free. Jul 2 07:43:38.903000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 07:43:39.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:43:39.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:43:39.085000 audit: BPF prog-id=10 op=LOAD Jul 2 07:43:39.085000 audit: BPF prog-id=10 op=UNLOAD Jul 2 07:43:39.085000 audit: BPF prog-id=11 op=LOAD Jul 2 07:43:39.085000 audit: BPF prog-id=11 op=UNLOAD Jul 2 07:43:39.116000 audit[905]: AVC avc: denied { associate } for pid=905 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 07:43:39.116000 audit[905]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001858e2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=888 pid=905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:39.116000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:43:39.118000 audit[905]: AVC avc: denied { associate } for pid=905 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 07:43:39.118000 audit[905]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001859b9 a2=1ed a3=0 items=2 ppid=888 pid=905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:39.118000 audit: CWD cwd="/" Jul 2 07:43:39.118000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:39.118000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:39.118000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:43:41.285000 audit: BPF prog-id=12 op=LOAD Jul 2 07:43:41.285000 audit: BPF prog-id=3 op=UNLOAD Jul 2 07:43:41.287000 audit: BPF prog-id=13 op=LOAD Jul 2 07:43:41.289000 audit: BPF prog-id=14 op=LOAD Jul 2 07:43:41.289000 audit: BPF prog-id=4 op=UNLOAD Jul 2 07:43:41.289000 audit: BPF prog-id=5 op=UNLOAD Jul 2 07:43:41.291000 audit: BPF prog-id=15 op=LOAD Jul 2 07:43:41.291000 audit: BPF prog-id=12 op=UNLOAD Jul 2 07:43:41.293000 audit: BPF prog-id=16 op=LOAD Jul 2 07:43:41.295000 audit: BPF prog-id=17 op=LOAD Jul 2 07:43:41.295000 audit: BPF prog-id=13 op=UNLOAD Jul 2 07:43:41.295000 audit: BPF prog-id=14 op=UNLOAD Jul 2 07:43:41.296000 audit: BPF prog-id=18 op=LOAD Jul 2 07:43:41.297000 audit: BPF prog-id=15 op=UNLOAD Jul 2 07:43:41.297000 audit: BPF prog-id=19 op=LOAD Jul 2 07:43:41.297000 audit: BPF prog-id=20 op=LOAD Jul 2 07:43:41.297000 audit: BPF prog-id=16 op=UNLOAD Jul 2 07:43:41.297000 audit: BPF prog-id=17 op=UNLOAD Jul 2 07:43:41.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.316000 audit: BPF prog-id=18 op=UNLOAD Jul 2 07:43:41.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.426000 audit: BPF prog-id=21 op=LOAD Jul 2 07:43:41.426000 audit: BPF prog-id=22 op=LOAD Jul 2 07:43:41.426000 audit: BPF prog-id=23 op=LOAD Jul 2 07:43:41.426000 audit: BPF prog-id=19 op=UNLOAD Jul 2 07:43:41.426000 audit: BPF prog-id=20 op=UNLOAD Jul 2 07:43:41.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.449000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 07:43:41.449000 audit[986]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd08829740 a2=4000 a3=7ffd088297dc items=0 ppid=1 pid=986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:41.449000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 07:43:41.283783 systemd[1]: Queued start job for default target multi-user.target. Jul 2 07:43:39.115394 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:43:41.283793 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 2 07:43:39.115657 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:43:41.298886 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 07:43:39.115673 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:43:39.115697 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 07:43:39.115706 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 07:43:41.453226 systemd[1]: Started systemd-journald.service. Jul 2 07:43:39.115733 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 07:43:39.115743 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 07:43:39.115919 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 07:43:39.115957 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:43:39.115968 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:43:41.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:39.116559 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 07:43:39.116593 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 07:43:39.116609 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 07:43:41.453835 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 07:43:39.116623 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 07:43:39.116638 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 07:43:39.116651 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 07:43:41.034590 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:41Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:43:41.034832 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:41Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:43:41.034926 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:41Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:43:41.035085 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:41Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:43:41.035131 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:41Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 07:43:41.035181 /usr/lib/systemd/system-generators/torcx-generator[905]: time="2024-07-02T07:43:41Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 07:43:41.454983 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 07:43:41.456036 systemd[1]: Mounted tmp.mount. Jul 2 07:43:41.457152 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 07:43:41.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.458429 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:43:41.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.459611 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 07:43:41.459770 systemd[1]: Finished modprobe@configfs.service. Jul 2 07:43:41.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.460968 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:43:41.461145 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:43:41.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.462329 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:43:41.462486 systemd[1]: Finished modprobe@drm.service. Jul 2 07:43:41.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.463604 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:43:41.463764 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:43:41.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.464975 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 07:43:41.465147 systemd[1]: Finished modprobe@fuse.service. Jul 2 07:43:41.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.466281 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:43:41.466420 systemd[1]: Finished modprobe@loop.service. Jul 2 07:43:41.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.467562 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:43:41.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.468735 systemd[1]: Finished systemd-network-generator.service. Jul 2 07:43:41.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.469906 systemd[1]: Finished systemd-remount-fs.service. Jul 2 07:43:41.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.471160 systemd[1]: Reached target network-pre.target. Jul 2 07:43:41.473546 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 07:43:41.475347 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 07:43:41.476083 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 07:43:41.478331 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 07:43:41.480978 systemd[1]: Starting systemd-journal-flush.service... Jul 2 07:43:41.481999 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:43:41.483041 systemd[1]: Starting systemd-random-seed.service... Jul 2 07:43:41.490783 systemd-journald[986]: Time spent on flushing to /var/log/journal/1ed6cb8c199f4f569ff635d88647ee23 is 13.118ms for 1158 entries. Jul 2 07:43:41.490783 systemd-journald[986]: System Journal (/var/log/journal/1ed6cb8c199f4f569ff635d88647ee23) is 8.0M, max 195.6M, 187.6M free. Jul 2 07:43:41.583848 systemd-journald[986]: Received client request to flush runtime journal. Jul 2 07:43:41.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.486311 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:43:41.487771 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:43:41.490161 systemd[1]: Starting systemd-sysusers.service... Jul 2 07:43:41.494654 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:43:41.584374 udevadm[1008]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 2 07:43:41.495727 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 07:43:41.496743 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 07:43:41.498706 systemd[1]: Starting systemd-udev-settle.service... Jul 2 07:43:41.511529 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:43:41.527932 systemd[1]: Finished systemd-sysusers.service. Jul 2 07:43:41.558130 systemd[1]: Finished systemd-random-seed.service. Jul 2 07:43:41.559172 systemd[1]: Reached target first-boot-complete.target. Jul 2 07:43:41.584782 systemd[1]: Finished systemd-journal-flush.service. Jul 2 07:43:41.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.941921 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 07:43:41.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.943000 audit: BPF prog-id=24 op=LOAD Jul 2 07:43:41.943000 audit: BPF prog-id=25 op=LOAD Jul 2 07:43:41.943000 audit: BPF prog-id=7 op=UNLOAD Jul 2 07:43:41.943000 audit: BPF prog-id=8 op=UNLOAD Jul 2 07:43:41.944265 systemd[1]: Starting systemd-udevd.service... Jul 2 07:43:41.959667 systemd-udevd[1012]: Using default interface naming scheme 'v252'. Jul 2 07:43:41.973460 systemd[1]: Started systemd-udevd.service. Jul 2 07:43:41.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:41.975000 audit: BPF prog-id=26 op=LOAD Jul 2 07:43:41.976261 systemd[1]: Starting systemd-networkd.service... Jul 2 07:43:41.981762 systemd[1]: Starting systemd-userdbd.service... Jul 2 07:43:41.980000 audit: BPF prog-id=27 op=LOAD Jul 2 07:43:41.981000 audit: BPF prog-id=28 op=LOAD Jul 2 07:43:41.981000 audit: BPF prog-id=29 op=LOAD Jul 2 07:43:41.992755 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 2 07:43:42.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.010211 systemd[1]: Started systemd-userdbd.service. Jul 2 07:43:42.030861 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:43:42.035095 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 2 07:43:42.039128 kernel: ACPI: button: Power Button [PWRF] Jul 2 07:43:42.051000 audit[1023]: AVC avc: denied { confidentiality } for pid=1023 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 2 07:43:42.064899 systemd-networkd[1022]: lo: Link UP Jul 2 07:43:42.064914 systemd-networkd[1022]: lo: Gained carrier Jul 2 07:43:42.065364 systemd-networkd[1022]: Enumeration completed Jul 2 07:43:42.065476 systemd[1]: Started systemd-networkd.service. Jul 2 07:43:42.065491 systemd-networkd[1022]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:43:42.066654 systemd-networkd[1022]: eth0: Link UP Jul 2 07:43:42.066666 systemd-networkd[1022]: eth0: Gained carrier Jul 2 07:43:42.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.051000 audit[1023]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=560327a612f0 a1=3207c a2=7f384e01fbc5 a3=5 items=108 ppid=1012 pid=1023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:42.051000 audit: CWD cwd="/" Jul 2 07:43:42.051000 audit: PATH item=0 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=1 name=(null) inode=11048 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=2 name=(null) inode=11048 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=3 name=(null) inode=11049 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=4 name=(null) inode=11048 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=5 name=(null) inode=11050 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=6 name=(null) inode=11048 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=7 name=(null) inode=11051 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=8 name=(null) inode=11051 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=9 name=(null) inode=11052 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=10 name=(null) inode=11051 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=11 name=(null) inode=11053 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=12 name=(null) inode=11051 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=13 name=(null) inode=11054 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=14 name=(null) inode=11051 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=15 name=(null) inode=11055 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=16 name=(null) inode=11051 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=17 name=(null) inode=11056 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=18 name=(null) inode=11048 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=19 name=(null) inode=11057 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=20 name=(null) inode=11057 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=21 name=(null) inode=11058 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=22 name=(null) inode=11057 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=23 name=(null) inode=11059 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=24 name=(null) inode=11057 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=25 name=(null) inode=11060 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=26 name=(null) inode=11057 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=27 name=(null) inode=11061 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=28 name=(null) inode=11057 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=29 name=(null) inode=11062 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=30 name=(null) inode=11048 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=31 name=(null) inode=11063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=32 name=(null) inode=11063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=33 name=(null) inode=11064 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=34 name=(null) inode=11063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=35 name=(null) inode=11065 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=36 name=(null) inode=11063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=37 name=(null) inode=11066 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=38 name=(null) inode=11063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=39 name=(null) inode=11067 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=40 name=(null) inode=11063 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=41 name=(null) inode=11068 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=42 name=(null) inode=11048 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=43 name=(null) inode=11069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=44 name=(null) inode=11069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=45 name=(null) inode=11070 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=46 name=(null) inode=11069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=47 name=(null) inode=11071 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=48 name=(null) inode=11069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=49 name=(null) inode=11072 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=50 name=(null) inode=11069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=51 name=(null) inode=11073 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=52 name=(null) inode=11069 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=53 name=(null) inode=11074 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=54 name=(null) inode=51 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=55 name=(null) inode=11075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=56 name=(null) inode=11075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=57 name=(null) inode=11076 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=58 name=(null) inode=11075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=59 name=(null) inode=11077 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=60 name=(null) inode=11075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=61 name=(null) inode=11078 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=62 name=(null) inode=11078 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=63 name=(null) inode=11079 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=64 name=(null) inode=11078 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=65 name=(null) inode=11080 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=66 name=(null) inode=11078 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=67 name=(null) inode=11081 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=68 name=(null) inode=11078 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=69 name=(null) inode=11082 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=70 name=(null) inode=11078 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=71 name=(null) inode=11083 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=72 name=(null) inode=11075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=73 name=(null) inode=11084 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=74 name=(null) inode=11084 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=75 name=(null) inode=11085 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=76 name=(null) inode=11084 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=77 name=(null) inode=11086 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=78 name=(null) inode=11084 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=79 name=(null) inode=11087 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=80 name=(null) inode=11084 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=81 name=(null) inode=11088 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=82 name=(null) inode=11084 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=83 name=(null) inode=11089 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=84 name=(null) inode=11075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=85 name=(null) inode=11090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=86 name=(null) inode=11090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=87 name=(null) inode=11091 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=88 name=(null) inode=11090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=89 name=(null) inode=11092 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=90 name=(null) inode=11090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=91 name=(null) inode=11093 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=92 name=(null) inode=11090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=93 name=(null) inode=11094 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=94 name=(null) inode=11090 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=95 name=(null) inode=11095 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=96 name=(null) inode=11075 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=97 name=(null) inode=11096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=98 name=(null) inode=11096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=99 name=(null) inode=11097 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=100 name=(null) inode=11096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=101 name=(null) inode=11098 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=102 name=(null) inode=11096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=103 name=(null) inode=11099 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=104 name=(null) inode=11096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=105 name=(null) inode=11100 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=106 name=(null) inode=11096 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PATH item=107 name=(null) inode=11101 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:43:42.051000 audit: PROCTITLE proctitle="(udev-worker)" Jul 2 07:43:42.081223 systemd-networkd[1022]: eth0: DHCPv4 address 10.0.0.39/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 2 07:43:42.095092 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 0 Jul 2 07:43:42.102077 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 2 07:43:42.112087 kernel: mousedev: PS/2 mouse device common for all mice Jul 2 07:43:42.148540 kernel: kvm: Nested Virtualization enabled Jul 2 07:43:42.148636 kernel: SVM: kvm: Nested Paging enabled Jul 2 07:43:42.148651 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 2 07:43:42.149233 kernel: SVM: Virtual GIF supported Jul 2 07:43:42.164091 kernel: EDAC MC: Ver: 3.0.0 Jul 2 07:43:42.181575 systemd[1]: Finished systemd-udev-settle.service. Jul 2 07:43:42.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.183846 systemd[1]: Starting lvm2-activation-early.service... Jul 2 07:43:42.192050 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:43:42.218211 systemd[1]: Finished lvm2-activation-early.service. Jul 2 07:43:42.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.219235 systemd[1]: Reached target cryptsetup.target. Jul 2 07:43:42.220973 systemd[1]: Starting lvm2-activation.service... Jul 2 07:43:42.223901 lvm[1050]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:43:42.250767 systemd[1]: Finished lvm2-activation.service. Jul 2 07:43:42.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.251779 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:43:42.252691 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 07:43:42.252718 systemd[1]: Reached target local-fs.target. Jul 2 07:43:42.253583 systemd[1]: Reached target machines.target. Jul 2 07:43:42.255438 systemd[1]: Starting ldconfig.service... Jul 2 07:43:42.256581 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:43:42.256629 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:43:42.257440 systemd[1]: Starting systemd-boot-update.service... Jul 2 07:43:42.259282 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 07:43:42.261734 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 07:43:42.263960 systemd[1]: Starting systemd-sysext.service... Jul 2 07:43:42.265223 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1052 (bootctl) Jul 2 07:43:42.266203 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 07:43:42.268526 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 07:43:42.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.276413 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 07:43:42.281418 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 07:43:42.281644 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 07:43:42.297086 kernel: loop0: detected capacity change from 0 to 210664 Jul 2 07:43:42.309196 systemd-fsck[1060]: fsck.fat 4.2 (2021-01-31) Jul 2 07:43:42.309196 systemd-fsck[1060]: /dev/vda1: 790 files, 119261/258078 clusters Jul 2 07:43:42.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.310422 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 07:43:42.315833 systemd[1]: Mounting boot.mount... Jul 2 07:43:42.782092 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 07:43:42.802800 systemd[1]: Mounted boot.mount. Jul 2 07:43:42.813387 systemd[1]: Finished systemd-boot-update.service. Jul 2 07:43:42.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.820089 kernel: loop1: detected capacity change from 0 to 210664 Jul 2 07:43:42.829708 (sd-sysext)[1067]: Using extensions 'kubernetes'. Jul 2 07:43:42.830144 (sd-sysext)[1067]: Merged extensions into '/usr'. Jul 2 07:43:42.840809 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 07:43:42.841470 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 07:43:42.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.846541 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:42.848235 systemd[1]: Mounting usr-share-oem.mount... Jul 2 07:43:42.849450 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:43:42.850680 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:43:42.852843 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:43:42.854929 systemd[1]: Starting modprobe@loop.service... Jul 2 07:43:42.855813 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:43:42.855938 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:43:42.856085 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:42.858493 systemd[1]: Mounted usr-share-oem.mount. Jul 2 07:43:42.859625 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:43:42.859730 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:43:42.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.861256 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:43:42.861352 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:43:42.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.863139 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:43:42.863262 systemd[1]: Finished modprobe@loop.service. Jul 2 07:43:42.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.864651 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:43:42.864751 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:43:42.865931 systemd[1]: Finished systemd-sysext.service. Jul 2 07:43:42.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:42.868044 systemd[1]: Starting ensure-sysext.service... Jul 2 07:43:42.869681 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 07:43:42.875406 systemd[1]: Reloading. Jul 2 07:43:42.885504 systemd-tmpfiles[1075]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 07:43:42.886052 ldconfig[1051]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 07:43:42.888393 systemd-tmpfiles[1075]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 07:43:42.892304 systemd-tmpfiles[1075]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 07:43:42.923773 /usr/lib/systemd/system-generators/torcx-generator[1094]: time="2024-07-02T07:43:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:43:42.923809 /usr/lib/systemd/system-generators/torcx-generator[1094]: time="2024-07-02T07:43:42Z" level=info msg="torcx already run" Jul 2 07:43:42.988096 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:43:42.988113 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:43:43.005240 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:43:43.056000 audit: BPF prog-id=30 op=LOAD Jul 2 07:43:43.056000 audit: BPF prog-id=27 op=UNLOAD Jul 2 07:43:43.056000 audit: BPF prog-id=31 op=LOAD Jul 2 07:43:43.056000 audit: BPF prog-id=32 op=LOAD Jul 2 07:43:43.056000 audit: BPF prog-id=28 op=UNLOAD Jul 2 07:43:43.056000 audit: BPF prog-id=29 op=UNLOAD Jul 2 07:43:43.057000 audit: BPF prog-id=33 op=LOAD Jul 2 07:43:43.057000 audit: BPF prog-id=26 op=UNLOAD Jul 2 07:43:43.057000 audit: BPF prog-id=34 op=LOAD Jul 2 07:43:43.057000 audit: BPF prog-id=35 op=LOAD Jul 2 07:43:43.057000 audit: BPF prog-id=24 op=UNLOAD Jul 2 07:43:43.057000 audit: BPF prog-id=25 op=UNLOAD Jul 2 07:43:43.059000 audit: BPF prog-id=36 op=LOAD Jul 2 07:43:43.059000 audit: BPF prog-id=21 op=UNLOAD Jul 2 07:43:43.059000 audit: BPF prog-id=37 op=LOAD Jul 2 07:43:43.059000 audit: BPF prog-id=38 op=LOAD Jul 2 07:43:43.059000 audit: BPF prog-id=22 op=UNLOAD Jul 2 07:43:43.059000 audit: BPF prog-id=23 op=UNLOAD Jul 2 07:43:43.061888 systemd[1]: Finished ldconfig.service. Jul 2 07:43:43.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.063720 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 07:43:43.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.067252 systemd[1]: Starting audit-rules.service... Jul 2 07:43:43.068885 systemd[1]: Starting clean-ca-certificates.service... Jul 2 07:43:43.070608 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 07:43:43.072000 audit: BPF prog-id=39 op=LOAD Jul 2 07:43:43.074000 audit: BPF prog-id=40 op=LOAD Jul 2 07:43:43.073092 systemd[1]: Starting systemd-resolved.service... Jul 2 07:43:43.075039 systemd[1]: Starting systemd-timesyncd.service... Jul 2 07:43:43.076841 systemd[1]: Starting systemd-update-utmp.service... Jul 2 07:43:43.079646 systemd[1]: Finished clean-ca-certificates.service. Jul 2 07:43:43.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.080000 audit[1145]: SYSTEM_BOOT pid=1145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.080884 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:43:43.084899 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:43.085910 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:43:43.087137 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:43:43.088807 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:43:43.090570 systemd[1]: Starting modprobe@loop.service... Jul 2 07:43:43.091342 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:43:43.091477 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:43:43.091572 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:43:43.091634 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:43.092566 systemd[1]: Finished systemd-update-utmp.service. Jul 2 07:43:43.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.093883 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 07:43:43.095227 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:43:43.095328 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:43:43.096577 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:43:43.096670 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:43:43.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.098149 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:43:43.098271 systemd[1]: Finished modprobe@loop.service. Jul 2 07:43:43.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:43.101382 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:43.101553 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:43:43.102573 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:43:43.104241 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:43:43.106092 systemd[1]: Starting modprobe@loop.service... Jul 2 07:43:43.106829 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:43:43.106940 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:43:43.108209 systemd[1]: Starting systemd-update-done.service... Jul 2 07:43:43.109000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 07:43:43.109000 audit[1163]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd73931480 a2=420 a3=0 items=0 ppid=1137 pid=1163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:43.109000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 07:43:43.109108 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:43:43.110670 augenrules[1163]: No rules Jul 2 07:43:43.109192 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:43.110068 systemd[1]: Finished audit-rules.service. Jul 2 07:43:43.111284 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:43:43.111401 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:43:43.113613 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:43:43.113784 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:43:43.115219 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:43:43.115348 systemd[1]: Finished modprobe@loop.service. Jul 2 07:43:43.116567 systemd[1]: Finished systemd-update-done.service. Jul 2 07:43:43.117819 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:43:43.117915 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:43:43.120710 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:43.120947 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:43:43.122713 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:43:43.124776 systemd[1]: Starting modprobe@drm.service... Jul 2 07:43:43.126542 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:43:43.128659 systemd[1]: Starting modprobe@loop.service... Jul 2 07:43:43.129687 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:43:43.129833 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:43:43.130917 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 07:43:43.131954 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:43:43.132108 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:43:43.133383 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:43:43.133538 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:43:43.134812 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:43:43.134952 systemd[1]: Finished modprobe@drm.service. Jul 2 07:43:43.136260 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:43:43.136406 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:43:43.137644 systemd[1]: Started systemd-timesyncd.service. Jul 2 07:43:44.108514 systemd-timesyncd[1144]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 2 07:43:44.108604 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:43:44.108776 systemd[1]: Finished modprobe@loop.service. Jul 2 07:43:44.108888 systemd-timesyncd[1144]: Initial clock synchronization to Tue 2024-07-02 07:43:44.108414 UTC. Jul 2 07:43:44.110274 systemd[1]: Reached target time-set.target. Jul 2 07:43:44.111212 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:43:44.111251 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:43:44.111554 systemd[1]: Finished ensure-sysext.service. Jul 2 07:43:44.122435 systemd-resolved[1143]: Positive Trust Anchors: Jul 2 07:43:44.122451 systemd-resolved[1143]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:43:44.122490 systemd-resolved[1143]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:43:44.130435 systemd-resolved[1143]: Defaulting to hostname 'linux'. Jul 2 07:43:44.132347 systemd[1]: Started systemd-resolved.service. Jul 2 07:43:44.133365 systemd[1]: Reached target network.target. Jul 2 07:43:44.134188 systemd[1]: Reached target nss-lookup.target. Jul 2 07:43:44.135043 systemd[1]: Reached target sysinit.target. Jul 2 07:43:44.135991 systemd[1]: Started motdgen.path. Jul 2 07:43:44.136783 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 07:43:44.138126 systemd[1]: Started logrotate.timer. Jul 2 07:43:44.139053 systemd[1]: Started mdadm.timer. Jul 2 07:43:44.139825 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 07:43:44.140796 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 07:43:44.140841 systemd[1]: Reached target paths.target. Jul 2 07:43:44.141694 systemd[1]: Reached target timers.target. Jul 2 07:43:44.143126 systemd[1]: Listening on dbus.socket. Jul 2 07:43:44.145304 systemd[1]: Starting docker.socket... Jul 2 07:43:44.148810 systemd[1]: Listening on sshd.socket. Jul 2 07:43:44.149823 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:43:44.150343 systemd[1]: Listening on docker.socket. Jul 2 07:43:44.151246 systemd[1]: Reached target sockets.target. Jul 2 07:43:44.152151 systemd[1]: Reached target basic.target. Jul 2 07:43:44.153009 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:43:44.153045 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:43:44.154273 systemd[1]: Starting containerd.service... Jul 2 07:43:44.156381 systemd[1]: Starting dbus.service... Jul 2 07:43:44.158268 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 07:43:44.160344 systemd[1]: Starting extend-filesystems.service... Jul 2 07:43:44.161299 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 07:43:44.162571 systemd[1]: Starting motdgen.service... Jul 2 07:43:44.169615 jq[1179]: false Jul 2 07:43:44.164425 systemd[1]: Starting prepare-helm.service... Jul 2 07:43:44.166389 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 07:43:44.168087 systemd[1]: Starting sshd-keygen.service... Jul 2 07:43:44.170663 systemd[1]: Starting systemd-logind.service... Jul 2 07:43:44.171374 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:43:44.171428 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 07:43:44.171736 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 07:43:44.183560 jq[1193]: true Jul 2 07:43:44.172250 systemd[1]: Starting update-engine.service... Jul 2 07:43:44.174277 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 07:43:44.176494 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 07:43:44.176645 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 07:43:44.186436 jq[1198]: true Jul 2 07:43:44.187112 dbus-daemon[1178]: [system] SELinux support is enabled Jul 2 07:43:44.187059 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 07:43:44.187201 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 07:43:44.188264 systemd[1]: Started dbus.service. Jul 2 07:43:44.190646 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 07:43:44.193145 tar[1195]: linux-amd64/helm Jul 2 07:43:44.190666 systemd[1]: Reached target system-config.target. Jul 2 07:43:44.191630 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 07:43:44.191645 systemd[1]: Reached target user-config.target. Jul 2 07:43:44.193713 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 07:43:44.193848 systemd[1]: Finished motdgen.service. Jul 2 07:43:44.198138 extend-filesystems[1180]: Found loop1 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found sr0 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda1 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda2 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda3 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found usr Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda4 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda6 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda7 Jul 2 07:43:44.199080 extend-filesystems[1180]: Found vda9 Jul 2 07:43:44.215823 extend-filesystems[1180]: Checking size of /dev/vda9 Jul 2 07:43:44.217013 update_engine[1191]: I0702 07:43:44.214489 1191 main.cc:92] Flatcar Update Engine starting Jul 2 07:43:44.217871 systemd[1]: Started update-engine.service. Jul 2 07:43:44.218830 update_engine[1191]: I0702 07:43:44.217888 1191 update_check_scheduler.cc:74] Next update check in 8m48s Jul 2 07:43:44.220141 systemd[1]: Started locksmithd.service. Jul 2 07:43:44.226264 extend-filesystems[1180]: Resized partition /dev/vda9 Jul 2 07:43:44.227198 env[1197]: time="2024-07-02T07:43:44.226429171Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 07:43:44.229713 extend-filesystems[1231]: resize2fs 1.46.5 (30-Dec-2021) Jul 2 07:43:44.232117 systemd-logind[1189]: Watching system buttons on /dev/input/event1 (Power Button) Jul 2 07:43:44.232131 systemd-logind[1189]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 2 07:43:44.232632 systemd-logind[1189]: New seat seat0. Jul 2 07:43:44.233907 systemd[1]: Started systemd-logind.service. Jul 2 07:43:44.240792 bash[1223]: Updated "/home/core/.ssh/authorized_keys" Jul 2 07:43:44.241534 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 2 07:43:44.243103 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 07:43:44.250773 env[1197]: time="2024-07-02T07:43:44.250612633Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 07:43:44.251087 env[1197]: time="2024-07-02T07:43:44.251051597Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:43:44.254151 env[1197]: time="2024-07-02T07:43:44.254078453Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:43:44.254195 env[1197]: time="2024-07-02T07:43:44.254162310Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:43:44.254662 env[1197]: time="2024-07-02T07:43:44.254612805Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:43:44.254714 env[1197]: time="2024-07-02T07:43:44.254671305Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 07:43:44.254786 env[1197]: time="2024-07-02T07:43:44.254728953Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 07:43:44.254827 env[1197]: time="2024-07-02T07:43:44.254794406Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 07:43:44.254949 env[1197]: time="2024-07-02T07:43:44.254921734Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:43:44.255205 env[1197]: time="2024-07-02T07:43:44.255176883Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:43:44.255338 env[1197]: time="2024-07-02T07:43:44.255309101Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:43:44.255338 env[1197]: time="2024-07-02T07:43:44.255330731Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 07:43:44.255398 env[1197]: time="2024-07-02T07:43:44.255373602Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 07:43:44.255398 env[1197]: time="2024-07-02T07:43:44.255384382Z" level=info msg="metadata content store policy set" policy=shared Jul 2 07:43:44.261492 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 2 07:43:44.289647 extend-filesystems[1231]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 2 07:43:44.289647 extend-filesystems[1231]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 2 07:43:44.289647 extend-filesystems[1231]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 2 07:43:44.298897 extend-filesystems[1180]: Resized filesystem in /dev/vda9 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298320212Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298360067Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298371829Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298405773Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298419037Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298431050Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298442281Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298453883Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298477297Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298490622Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298501682Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298513124Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298611538Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 07:43:44.299900 env[1197]: time="2024-07-02T07:43:44.298676400Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 07:43:44.290461 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.298898577Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.298923053Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.298935115Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.298975942Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.298988195Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.298999165Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299010156Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299020986Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299032388Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299042587Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299052886Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299069658Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299163293Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299176548Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300837 env[1197]: time="2024-07-02T07:43:44.299187318Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.290614 systemd[1]: Finished extend-filesystems.service. Jul 2 07:43:44.301265 env[1197]: time="2024-07-02T07:43:44.299197798Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 07:43:44.301265 env[1197]: time="2024-07-02T07:43:44.299211574Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 07:43:44.301265 env[1197]: time="2024-07-02T07:43:44.299222364Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 07:43:44.301265 env[1197]: time="2024-07-02T07:43:44.299238614Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 07:43:44.301265 env[1197]: time="2024-07-02T07:43:44.299272939Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 07:43:44.300274 systemd[1]: Started containerd.service. Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.299455130Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.299514341Z" level=info msg="Connect containerd service" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.299543095Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.299996836Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300182545Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300210988Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300409310Z" level=info msg="Start subscribing containerd event" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300514607Z" level=info msg="Start recovering state" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300590319Z" level=info msg="Start event monitor" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300603504Z" level=info msg="Start snapshots syncer" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300614905Z" level=info msg="Start cni network conf syncer for default" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300622910Z" level=info msg="Start streaming server" Jul 2 07:43:44.301432 env[1197]: time="2024-07-02T07:43:44.300727897Z" level=info msg="containerd successfully booted in 0.074824s" Jul 2 07:43:44.308934 locksmithd[1226]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 07:43:44.396561 sshd_keygen[1196]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 07:43:44.415262 systemd[1]: Finished sshd-keygen.service. Jul 2 07:43:44.417628 systemd[1]: Starting issuegen.service... Jul 2 07:43:44.422537 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 07:43:44.422655 systemd[1]: Finished issuegen.service. Jul 2 07:43:44.424445 systemd[1]: Starting systemd-user-sessions.service... Jul 2 07:43:44.429097 systemd[1]: Finished systemd-user-sessions.service. Jul 2 07:43:44.431069 systemd[1]: Started getty@tty1.service. Jul 2 07:43:44.432763 systemd[1]: Started serial-getty@ttyS0.service. Jul 2 07:43:44.433782 systemd[1]: Reached target getty.target. Jul 2 07:43:44.595549 tar[1195]: linux-amd64/LICENSE Jul 2 07:43:44.595662 tar[1195]: linux-amd64/README.md Jul 2 07:43:44.599202 systemd[1]: Finished prepare-helm.service. Jul 2 07:43:44.724616 systemd-networkd[1022]: eth0: Gained IPv6LL Jul 2 07:43:44.726110 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 07:43:44.727285 systemd[1]: Reached target network-online.target. Jul 2 07:43:44.729343 systemd[1]: Starting kubelet.service... Jul 2 07:43:45.253322 systemd[1]: Started kubelet.service. Jul 2 07:43:45.254489 systemd[1]: Reached target multi-user.target. Jul 2 07:43:45.256347 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 07:43:45.263504 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 07:43:45.263616 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 07:43:45.264666 systemd[1]: Startup finished in 556ms (kernel) + 4.218s (initrd) + 5.434s (userspace) = 10.209s. Jul 2 07:43:45.661503 kubelet[1259]: E0702 07:43:45.661389 1259 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:43:45.663296 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:43:45.663404 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:43:53.655301 systemd[1]: Created slice system-sshd.slice. Jul 2 07:43:53.656213 systemd[1]: Started sshd@0-10.0.0.39:22-10.0.0.1:54928.service. Jul 2 07:43:53.688775 sshd[1269]: Accepted publickey for core from 10.0.0.1 port 54928 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:43:53.690230 sshd[1269]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:53.697305 systemd[1]: Created slice user-500.slice. Jul 2 07:43:53.698341 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 07:43:53.699714 systemd-logind[1189]: New session 1 of user core. Jul 2 07:43:53.705821 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 07:43:53.706907 systemd[1]: Starting user@500.service... Jul 2 07:43:53.709210 (systemd)[1272]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:53.773525 systemd[1272]: Queued start job for default target default.target. Jul 2 07:43:53.774028 systemd[1272]: Reached target paths.target. Jul 2 07:43:53.774051 systemd[1272]: Reached target sockets.target. Jul 2 07:43:53.774067 systemd[1272]: Reached target timers.target. Jul 2 07:43:53.774081 systemd[1272]: Reached target basic.target. Jul 2 07:43:53.774128 systemd[1272]: Reached target default.target. Jul 2 07:43:53.774160 systemd[1272]: Startup finished in 60ms. Jul 2 07:43:53.774210 systemd[1]: Started user@500.service. Jul 2 07:43:53.775347 systemd[1]: Started session-1.scope. Jul 2 07:43:53.826644 systemd[1]: Started sshd@1-10.0.0.39:22-10.0.0.1:54936.service. Jul 2 07:43:53.862568 sshd[1281]: Accepted publickey for core from 10.0.0.1 port 54936 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:43:53.863953 sshd[1281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:53.867814 systemd-logind[1189]: New session 2 of user core. Jul 2 07:43:53.868796 systemd[1]: Started session-2.scope. Jul 2 07:43:53.920015 sshd[1281]: pam_unix(sshd:session): session closed for user core Jul 2 07:43:53.922733 systemd[1]: sshd@1-10.0.0.39:22-10.0.0.1:54936.service: Deactivated successfully. Jul 2 07:43:53.923271 systemd[1]: session-2.scope: Deactivated successfully. Jul 2 07:43:53.923849 systemd-logind[1189]: Session 2 logged out. Waiting for processes to exit. Jul 2 07:43:53.924943 systemd[1]: Started sshd@2-10.0.0.39:22-10.0.0.1:54948.service. Jul 2 07:43:53.925643 systemd-logind[1189]: Removed session 2. Jul 2 07:43:53.954355 sshd[1287]: Accepted publickey for core from 10.0.0.1 port 54948 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:43:53.955138 sshd[1287]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:53.958029 systemd-logind[1189]: New session 3 of user core. Jul 2 07:43:53.958733 systemd[1]: Started session-3.scope. Jul 2 07:43:54.007153 sshd[1287]: pam_unix(sshd:session): session closed for user core Jul 2 07:43:54.009687 systemd[1]: sshd@2-10.0.0.39:22-10.0.0.1:54948.service: Deactivated successfully. Jul 2 07:43:54.010166 systemd[1]: session-3.scope: Deactivated successfully. Jul 2 07:43:54.010665 systemd-logind[1189]: Session 3 logged out. Waiting for processes to exit. Jul 2 07:43:54.011429 systemd[1]: Started sshd@3-10.0.0.39:22-10.0.0.1:54958.service. Jul 2 07:43:54.012125 systemd-logind[1189]: Removed session 3. Jul 2 07:43:54.040873 sshd[1293]: Accepted publickey for core from 10.0.0.1 port 54958 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:43:54.041821 sshd[1293]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:54.044976 systemd-logind[1189]: New session 4 of user core. Jul 2 07:43:54.045797 systemd[1]: Started session-4.scope. Jul 2 07:43:54.099282 sshd[1293]: pam_unix(sshd:session): session closed for user core Jul 2 07:43:54.102051 systemd[1]: sshd@3-10.0.0.39:22-10.0.0.1:54958.service: Deactivated successfully. Jul 2 07:43:54.102532 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 07:43:54.102981 systemd-logind[1189]: Session 4 logged out. Waiting for processes to exit. Jul 2 07:43:54.103977 systemd[1]: Started sshd@4-10.0.0.39:22-10.0.0.1:54966.service. Jul 2 07:43:54.104758 systemd-logind[1189]: Removed session 4. Jul 2 07:43:54.134197 sshd[1299]: Accepted publickey for core from 10.0.0.1 port 54966 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:43:54.135319 sshd[1299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:54.138549 systemd-logind[1189]: New session 5 of user core. Jul 2 07:43:54.139218 systemd[1]: Started session-5.scope. Jul 2 07:43:54.194294 sudo[1302]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 07:43:54.194557 sudo[1302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:43:54.202695 dbus-daemon[1178]: \xd0\u001d\xf7\xaf\xbdU: received setenforce notice (enforcing=-114439744) Jul 2 07:43:54.204603 sudo[1302]: pam_unix(sudo:session): session closed for user root Jul 2 07:43:54.206004 sshd[1299]: pam_unix(sshd:session): session closed for user core Jul 2 07:43:54.208816 systemd[1]: sshd@4-10.0.0.39:22-10.0.0.1:54966.service: Deactivated successfully. Jul 2 07:43:54.209300 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 07:43:54.209903 systemd-logind[1189]: Session 5 logged out. Waiting for processes to exit. Jul 2 07:43:54.210875 systemd[1]: Started sshd@5-10.0.0.39:22-10.0.0.1:54976.service. Jul 2 07:43:54.211590 systemd-logind[1189]: Removed session 5. Jul 2 07:43:54.241356 sshd[1306]: Accepted publickey for core from 10.0.0.1 port 54976 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:43:54.242376 sshd[1306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:54.245603 systemd-logind[1189]: New session 6 of user core. Jul 2 07:43:54.246170 systemd[1]: Started session-6.scope. Jul 2 07:43:54.299841 sudo[1310]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 07:43:54.300025 sudo[1310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:43:54.303050 sudo[1310]: pam_unix(sudo:session): session closed for user root Jul 2 07:43:54.307948 sudo[1309]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 07:43:54.308137 sudo[1309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:43:54.317101 systemd[1]: Stopping audit-rules.service... Jul 2 07:43:54.317000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:43:54.318625 auditctl[1313]: No rules Jul 2 07:43:54.318921 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 07:43:54.319068 systemd[1]: Stopped audit-rules.service. Jul 2 07:43:54.319233 kernel: kauditd_printk_skb: 223 callbacks suppressed Jul 2 07:43:54.319288 kernel: audit: type=1305 audit(1719906234.317:201): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:43:54.326329 kernel: audit: type=1300 audit(1719906234.317:201): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffbc444060 a2=420 a3=0 items=0 ppid=1 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:54.317000 audit[1313]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffbc444060 a2=420 a3=0 items=0 ppid=1 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:54.323423 systemd[1]: Starting audit-rules.service... Jul 2 07:43:54.317000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:43:54.331494 kernel: audit: type=1327 audit(1719906234.317:201): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:43:54.331546 kernel: audit: type=1131 audit(1719906234.318:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.340034 augenrules[1330]: No rules Jul 2 07:43:54.340722 systemd[1]: Finished audit-rules.service. Jul 2 07:43:54.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.341776 sudo[1309]: pam_unix(sudo:session): session closed for user root Jul 2 07:43:54.340000 audit[1309]: USER_END pid=1309 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.345113 sshd[1306]: pam_unix(sshd:session): session closed for user core Jul 2 07:43:54.347431 systemd[1]: sshd@5-10.0.0.39:22-10.0.0.1:54976.service: Deactivated successfully. Jul 2 07:43:54.348306 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 07:43:54.348649 kernel: audit: type=1130 audit(1719906234.340:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.348693 kernel: audit: type=1106 audit(1719906234.340:204): pid=1309 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.348731 kernel: audit: type=1104 audit(1719906234.340:205): pid=1309 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.340000 audit[1309]: CRED_DISP pid=1309 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.348961 systemd-logind[1189]: Session 6 logged out. Waiting for processes to exit. Jul 2 07:43:54.344000 audit[1306]: USER_END pid=1306 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.353202 systemd[1]: Started sshd@6-10.0.0.39:22-10.0.0.1:54992.service. Jul 2 07:43:54.354552 systemd-logind[1189]: Removed session 6. Jul 2 07:43:54.356374 kernel: audit: type=1106 audit(1719906234.344:206): pid=1306 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.356428 kernel: audit: type=1104 audit(1719906234.344:207): pid=1306 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.344000 audit[1306]: CRED_DISP pid=1306 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.359945 kernel: audit: type=1131 audit(1719906234.344:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.39:22-10.0.0.1:54976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.39:22-10.0.0.1:54976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.39:22-10.0.0.1:54992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.385000 audit[1336]: USER_ACCT pid=1336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.386009 sshd[1336]: Accepted publickey for core from 10.0.0.1 port 54992 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:43:54.386000 audit[1336]: CRED_ACQ pid=1336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.386000 audit[1336]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdeab8a170 a2=3 a3=0 items=0 ppid=1 pid=1336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:54.386000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:43:54.386798 sshd[1336]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:43:54.389944 systemd-logind[1189]: New session 7 of user core. Jul 2 07:43:54.390719 systemd[1]: Started session-7.scope. Jul 2 07:43:54.393000 audit[1336]: USER_START pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.394000 audit[1338]: CRED_ACQ pid=1338 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:43:54.441000 audit[1339]: USER_ACCT pid=1339 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.441000 audit[1339]: CRED_REFR pid=1339 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.441880 sudo[1339]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 07:43:54.442080 sudo[1339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:43:54.443000 audit[1339]: USER_START pid=1339 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:43:54.928796 systemd[1]: Starting docker.service... Jul 2 07:43:54.968020 env[1351]: time="2024-07-02T07:43:54.967956348Z" level=info msg="Starting up" Jul 2 07:43:54.969487 env[1351]: time="2024-07-02T07:43:54.969419322Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:43:54.969558 env[1351]: time="2024-07-02T07:43:54.969456512Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:43:54.969558 env[1351]: time="2024-07-02T07:43:54.969522696Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:43:54.969558 env[1351]: time="2024-07-02T07:43:54.969537403Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:43:54.971132 env[1351]: time="2024-07-02T07:43:54.971099282Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:43:54.971132 env[1351]: time="2024-07-02T07:43:54.971124209Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:43:54.971220 env[1351]: time="2024-07-02T07:43:54.971141602Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:43:54.971220 env[1351]: time="2024-07-02T07:43:54.971149216Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:43:54.976423 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport901200606-merged.mount: Deactivated successfully. Jul 2 07:43:55.017352 env[1351]: time="2024-07-02T07:43:55.017301789Z" level=info msg="Loading containers: start." Jul 2 07:43:55.064000 audit[1385]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.064000 audit[1385]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffdfe6e480 a2=0 a3=7fffdfe6e46c items=0 ppid=1351 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.064000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 07:43:55.065000 audit[1387]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1387 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.065000 audit[1387]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd9672d600 a2=0 a3=7ffd9672d5ec items=0 ppid=1351 pid=1387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.065000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 07:43:55.067000 audit[1389]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.067000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff4a37b4a0 a2=0 a3=7fff4a37b48c items=0 ppid=1351 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.067000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:43:55.068000 audit[1391]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.068000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffeddc78bf0 a2=0 a3=7ffeddc78bdc items=0 ppid=1351 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.068000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:43:55.070000 audit[1393]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.070000 audit[1393]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef625ad70 a2=0 a3=7ffef625ad5c items=0 ppid=1351 pid=1393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.070000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 07:43:55.084000 audit[1398]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.084000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffce29412b0 a2=0 a3=7ffce294129c items=0 ppid=1351 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 07:43:55.093000 audit[1400]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.093000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe39b9f770 a2=0 a3=7ffe39b9f75c items=0 ppid=1351 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 07:43:55.095000 audit[1402]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.095000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffdeaa71db0 a2=0 a3=7ffdeaa71d9c items=0 ppid=1351 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.095000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 07:43:55.097000 audit[1404]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.097000 audit[1404]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffffe055ad0 a2=0 a3=7ffffe055abc items=0 ppid=1351 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.097000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:43:55.106000 audit[1408]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.106000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd8796c1f0 a2=0 a3=7ffd8796c1dc items=0 ppid=1351 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:43:55.107000 audit[1409]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.107000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdf37478c0 a2=0 a3=7ffdf37478ac items=0 ppid=1351 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.107000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:43:55.115491 kernel: Initializing XFRM netlink socket Jul 2 07:43:55.143321 env[1351]: time="2024-07-02T07:43:55.143267309Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 07:43:55.159000 audit[1417]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.159000 audit[1417]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd4103f310 a2=0 a3=7ffd4103f2fc items=0 ppid=1351 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.159000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 07:43:55.170000 audit[1420]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.170000 audit[1420]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd42e25170 a2=0 a3=7ffd42e2515c items=0 ppid=1351 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.170000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 07:43:55.173000 audit[1423]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.173000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc3606a2a0 a2=0 a3=7ffc3606a28c items=0 ppid=1351 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.173000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 07:43:55.175000 audit[1425]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.175000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffffa7f17e0 a2=0 a3=7ffffa7f17cc items=0 ppid=1351 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.175000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 07:43:55.177000 audit[1427]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.177000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd25847920 a2=0 a3=7ffd2584790c items=0 ppid=1351 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.177000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 07:43:55.178000 audit[1429]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.178000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc749baba0 a2=0 a3=7ffc749bab8c items=0 ppid=1351 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.178000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 07:43:55.181000 audit[1431]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.181000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff9d9c6a10 a2=0 a3=7fff9d9c69fc items=0 ppid=1351 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.181000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 07:43:55.190000 audit[1434]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.190000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffdeee46a50 a2=0 a3=7ffdeee46a3c items=0 ppid=1351 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 07:43:55.192000 audit[1436]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.192000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff49007c60 a2=0 a3=7fff49007c4c items=0 ppid=1351 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.192000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:43:55.194000 audit[1438]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.194000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdedcca2d0 a2=0 a3=7ffdedcca2bc items=0 ppid=1351 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.194000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:43:55.195000 audit[1440]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.195000 audit[1440]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc7ae7eb50 a2=0 a3=7ffc7ae7eb3c items=0 ppid=1351 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.195000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 07:43:55.196788 systemd-networkd[1022]: docker0: Link UP Jul 2 07:43:55.205000 audit[1444]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.205000 audit[1444]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff3e547d60 a2=0 a3=7fff3e547d4c items=0 ppid=1351 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.205000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:43:55.206000 audit[1445]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:43:55.206000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc193937c0 a2=0 a3=7ffc193937ac items=0 ppid=1351 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:43:55.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:43:55.207259 env[1351]: time="2024-07-02T07:43:55.207222738Z" level=info msg="Loading containers: done." Jul 2 07:43:55.215511 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1583187819-merged.mount: Deactivated successfully. Jul 2 07:43:55.221323 env[1351]: time="2024-07-02T07:43:55.221271525Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 07:43:55.221488 env[1351]: time="2024-07-02T07:43:55.221426896Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 07:43:55.221555 env[1351]: time="2024-07-02T07:43:55.221532504Z" level=info msg="Daemon has completed initialization" Jul 2 07:43:55.238775 systemd[1]: Started docker.service. Jul 2 07:43:55.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:55.246059 env[1351]: time="2024-07-02T07:43:55.246004758Z" level=info msg="API listen on /run/docker.sock" Jul 2 07:43:55.710262 env[1197]: time="2024-07-02T07:43:55.710219096Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.2\"" Jul 2 07:43:55.914074 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 07:43:55.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:55.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:55.914248 systemd[1]: Stopped kubelet.service. Jul 2 07:43:55.915780 systemd[1]: Starting kubelet.service... Jul 2 07:43:55.988662 systemd[1]: Started kubelet.service. Jul 2 07:43:55.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:43:56.021583 kubelet[1492]: E0702 07:43:56.021528 1492 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:43:56.024129 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:43:56.024236 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:43:56.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:43:56.577061 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3459912942.mount: Deactivated successfully. Jul 2 07:43:59.108937 env[1197]: time="2024-07-02T07:43:59.108872404Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:43:59.111039 env[1197]: time="2024-07-02T07:43:59.110984986Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:56ce0fd9fb532bcb552ddbdbe3064189ce823a71693d97ff7a0a7a4ff6bffbbe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:43:59.112777 env[1197]: time="2024-07-02T07:43:59.112746570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:43:59.114399 env[1197]: time="2024-07-02T07:43:59.114367289Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:340ab4a1d66a60630a7a298aa0b2576fcd82e51ecdddb751cf61e5d3846fde2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:43:59.115006 env[1197]: time="2024-07-02T07:43:59.114960081Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.2\" returns image reference \"sha256:56ce0fd9fb532bcb552ddbdbe3064189ce823a71693d97ff7a0a7a4ff6bffbbe\"" Jul 2 07:43:59.123059 env[1197]: time="2024-07-02T07:43:59.123028311Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.2\"" Jul 2 07:44:01.687529 env[1197]: time="2024-07-02T07:44:01.687445168Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:01.690484 env[1197]: time="2024-07-02T07:44:01.690420017Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e874818b3caac34f68704eb96bf248d0c8116b1262ab549d45d39dd3dd775974,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:01.692504 env[1197]: time="2024-07-02T07:44:01.692450846Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:01.694650 env[1197]: time="2024-07-02T07:44:01.694589988Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:4c412bc1fc585ddeba10d34a02e7507ea787ec2c57256d4c18fd230377ab048e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:01.695565 env[1197]: time="2024-07-02T07:44:01.695521094Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.2\" returns image reference \"sha256:e874818b3caac34f68704eb96bf248d0c8116b1262ab549d45d39dd3dd775974\"" Jul 2 07:44:01.713637 env[1197]: time="2024-07-02T07:44:01.713591713Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.2\"" Jul 2 07:44:03.239593 env[1197]: time="2024-07-02T07:44:03.239524672Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:03.241650 env[1197]: time="2024-07-02T07:44:03.241601827Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7820c83aa139453522e9028341d0d4f23ca2721ec80c7a47425446d11157b940,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:03.243760 env[1197]: time="2024-07-02T07:44:03.243661930Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:03.248213 env[1197]: time="2024-07-02T07:44:03.248162791Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:0ed75a333704f5d315395c6ec04d7af7405715537069b65d40b43ec1c8e030bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:03.248851 env[1197]: time="2024-07-02T07:44:03.248820955Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.2\" returns image reference \"sha256:7820c83aa139453522e9028341d0d4f23ca2721ec80c7a47425446d11157b940\"" Jul 2 07:44:03.263965 env[1197]: time="2024-07-02T07:44:03.263922777Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.2\"" Jul 2 07:44:04.933692 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2064573316.mount: Deactivated successfully. Jul 2 07:44:05.990111 env[1197]: time="2024-07-02T07:44:05.990055819Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:05.992441 env[1197]: time="2024-07-02T07:44:05.992350132Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53c535741fb446f6b34d720fdc5748db368ef96771111f3892682e6eab8f3772,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:05.993904 env[1197]: time="2024-07-02T07:44:05.993874521Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:05.995079 env[1197]: time="2024-07-02T07:44:05.995054233Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8a44c6e094af3dea3de57fa967e201608a358a3bd8b4e3f31ab905bbe4108aec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:05.995494 env[1197]: time="2024-07-02T07:44:05.995444325Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.2\" returns image reference \"sha256:53c535741fb446f6b34d720fdc5748db368ef96771111f3892682e6eab8f3772\"" Jul 2 07:44:06.009091 env[1197]: time="2024-07-02T07:44:06.009057093Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Jul 2 07:44:06.172615 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 07:44:06.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:06.172791 systemd[1]: Stopped kubelet.service. Jul 2 07:44:06.173778 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 2 07:44:06.173857 kernel: audit: type=1130 audit(1719906246.172:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:06.174755 systemd[1]: Starting kubelet.service... Jul 2 07:44:06.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:06.181312 kernel: audit: type=1131 audit(1719906246.172:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:06.271830 systemd[1]: Started kubelet.service. Jul 2 07:44:06.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:06.275490 kernel: audit: type=1130 audit(1719906246.271:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:06.922346 kubelet[1529]: E0702 07:44:06.922289 1529 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:44:06.924055 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:44:06.924174 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:44:06.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:44:06.927500 kernel: audit: type=1131 audit(1719906246.923:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:44:07.128371 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3317209140.mount: Deactivated successfully. Jul 2 07:44:08.261966 env[1197]: time="2024-07-02T07:44:08.261906390Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.320238 env[1197]: time="2024-07-02T07:44:08.320181597Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.351040 env[1197]: time="2024-07-02T07:44:08.350995754Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.366366 env[1197]: time="2024-07-02T07:44:08.366314843Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.367156 env[1197]: time="2024-07-02T07:44:08.367071823Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Jul 2 07:44:08.384759 env[1197]: time="2024-07-02T07:44:08.384713547Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 07:44:08.914002 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount868148281.mount: Deactivated successfully. Jul 2 07:44:08.919879 env[1197]: time="2024-07-02T07:44:08.919818610Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.921877 env[1197]: time="2024-07-02T07:44:08.921853867Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.923335 env[1197]: time="2024-07-02T07:44:08.923308275Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.924862 env[1197]: time="2024-07-02T07:44:08.924814018Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:08.925299 env[1197]: time="2024-07-02T07:44:08.925266307Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Jul 2 07:44:08.936954 env[1197]: time="2024-07-02T07:44:08.936386571Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\"" Jul 2 07:44:09.528103 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3078274392.mount: Deactivated successfully. Jul 2 07:44:12.923491 env[1197]: time="2024-07-02T07:44:12.923412618Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:12.925763 env[1197]: time="2024-07-02T07:44:12.925727870Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3861cfcd7c04ccac1f062788eca39487248527ef0c0cfd477a83d7691a75a899,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:12.927709 env[1197]: time="2024-07-02T07:44:12.927669521Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:12.929657 env[1197]: time="2024-07-02T07:44:12.929612225Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:44a8e24dcbba3470ee1fee21d5e88d128c936e9b55d4bc51fbef8086f8ed123b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:12.930587 env[1197]: time="2024-07-02T07:44:12.930549673Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\" returns image reference \"sha256:3861cfcd7c04ccac1f062788eca39487248527ef0c0cfd477a83d7691a75a899\"" Jul 2 07:44:14.794261 systemd[1]: Stopped kubelet.service. Jul 2 07:44:14.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:14.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:14.798580 systemd[1]: Starting kubelet.service... Jul 2 07:44:14.802379 kernel: audit: type=1130 audit(1719906254.793:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:14.802477 kernel: audit: type=1131 audit(1719906254.795:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:14.814902 systemd[1]: Reloading. Jul 2 07:44:14.889958 /usr/lib/systemd/system-generators/torcx-generator[1647]: time="2024-07-02T07:44:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:44:14.890286 /usr/lib/systemd/system-generators/torcx-generator[1647]: time="2024-07-02T07:44:14Z" level=info msg="torcx already run" Jul 2 07:44:15.925119 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:44:15.925139 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:44:15.942685 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:44:16.028404 kernel: audit: type=1400 audit(1719906256.000:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028483 kernel: audit: type=1400 audit(1719906256.000:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.034687 kernel: audit: type=1400 audit(1719906256.000:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.034737 kernel: audit: type=1400 audit(1719906256.000:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.034760 kernel: audit: type=1400 audit(1719906256.000:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037726 kernel: audit: type=1400 audit(1719906256.000:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.040748 kernel: audit: type=1400 audit(1719906256.000:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.065712 kernel: audit: type=1400 audit(1719906256.000:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.027000 audit: BPF prog-id=46 op=LOAD Jul 2 07:44:16.027000 audit: BPF prog-id=30 op=UNLOAD Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit: BPF prog-id=47 op=LOAD Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit: BPF prog-id=48 op=LOAD Jul 2 07:44:16.031000 audit: BPF prog-id=31 op=UNLOAD Jul 2 07:44:16.031000 audit: BPF prog-id=32 op=UNLOAD Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit: BPF prog-id=49 op=LOAD Jul 2 07:44:16.037000 audit: BPF prog-id=44 op=UNLOAD Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit: BPF prog-id=50 op=LOAD Jul 2 07:44:16.062000 audit: BPF prog-id=39 op=UNLOAD Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.065000 audit: BPF prog-id=51 op=LOAD Jul 2 07:44:16.065000 audit: BPF prog-id=33 op=UNLOAD Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit: BPF prog-id=52 op=LOAD Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.066000 audit: BPF prog-id=53 op=LOAD Jul 2 07:44:16.066000 audit: BPF prog-id=34 op=UNLOAD Jul 2 07:44:16.066000 audit: BPF prog-id=35 op=UNLOAD Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.067000 audit: BPF prog-id=54 op=LOAD Jul 2 07:44:16.067000 audit: BPF prog-id=40 op=UNLOAD Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit: BPF prog-id=55 op=LOAD Jul 2 07:44:16.068000 audit: BPF prog-id=36 op=UNLOAD Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit: BPF prog-id=56 op=LOAD Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.068000 audit: BPF prog-id=57 op=LOAD Jul 2 07:44:16.068000 audit: BPF prog-id=37 op=UNLOAD Jul 2 07:44:16.068000 audit: BPF prog-id=38 op=UNLOAD Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.069000 audit: BPF prog-id=58 op=LOAD Jul 2 07:44:16.069000 audit: BPF prog-id=41 op=UNLOAD Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit: BPF prog-id=59 op=LOAD Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.070000 audit: BPF prog-id=60 op=LOAD Jul 2 07:44:16.070000 audit: BPF prog-id=42 op=UNLOAD Jul 2 07:44:16.070000 audit: BPF prog-id=43 op=UNLOAD Jul 2 07:44:16.080292 systemd[1]: Started kubelet.service. Jul 2 07:44:16.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:16.081696 systemd[1]: Stopping kubelet.service... Jul 2 07:44:16.081946 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 07:44:16.082114 systemd[1]: Stopped kubelet.service. Jul 2 07:44:16.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:16.083610 systemd[1]: Starting kubelet.service... Jul 2 07:44:16.181675 systemd[1]: Started kubelet.service. Jul 2 07:44:16.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:16.223103 kubelet[1696]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:44:16.223103 kubelet[1696]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:44:16.223103 kubelet[1696]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:44:16.224104 kubelet[1696]: I0702 07:44:16.224022 1696 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:44:16.820135 kubelet[1696]: I0702 07:44:16.820079 1696 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Jul 2 07:44:16.820135 kubelet[1696]: I0702 07:44:16.820114 1696 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:44:16.820370 kubelet[1696]: I0702 07:44:16.820351 1696 server.go:927] "Client rotation is on, will bootstrap in background" Jul 2 07:44:16.832272 kubelet[1696]: I0702 07:44:16.832215 1696 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:44:16.833679 kubelet[1696]: E0702 07:44:16.833649 1696 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.39:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.842527 kubelet[1696]: I0702 07:44:16.842504 1696 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:44:16.844089 kubelet[1696]: I0702 07:44:16.844052 1696 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:44:16.844282 kubelet[1696]: I0702 07:44:16.844084 1696 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:44:16.844992 kubelet[1696]: I0702 07:44:16.844969 1696 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:44:16.844992 kubelet[1696]: I0702 07:44:16.844989 1696 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:44:16.845112 kubelet[1696]: I0702 07:44:16.845094 1696 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:44:16.845678 kubelet[1696]: I0702 07:44:16.845657 1696 kubelet.go:400] "Attempting to sync node with API server" Jul 2 07:44:16.845678 kubelet[1696]: I0702 07:44:16.845674 1696 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:44:16.845750 kubelet[1696]: I0702 07:44:16.845696 1696 kubelet.go:312] "Adding apiserver pod source" Jul 2 07:44:16.845750 kubelet[1696]: I0702 07:44:16.845711 1696 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:44:16.852243 kubelet[1696]: W0702 07:44:16.852170 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.852243 kubelet[1696]: E0702 07:44:16.852235 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.852335 kubelet[1696]: W0702 07:44:16.852290 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.852335 kubelet[1696]: E0702 07:44:16.852324 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.854959 kubelet[1696]: I0702 07:44:16.854936 1696 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:44:16.857788 kubelet[1696]: I0702 07:44:16.857746 1696 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 07:44:16.857899 kubelet[1696]: W0702 07:44:16.857832 1696 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 07:44:16.858496 kubelet[1696]: I0702 07:44:16.858458 1696 server.go:1264] "Started kubelet" Jul 2 07:44:16.864773 kubelet[1696]: I0702 07:44:16.864726 1696 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:44:16.866711 kubelet[1696]: I0702 07:44:16.866692 1696 server.go:455] "Adding debug handlers to kubelet server" Jul 2 07:44:16.866000 audit[1696]: AVC avc: denied { mac_admin } for pid=1696 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.866000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:44:16.866000 audit[1696]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a6bf80 a1=c000de07c8 a2=c000a6bf50 a3=25 items=0 ppid=1 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.866000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:44:16.866000 audit[1696]: AVC avc: denied { mac_admin } for pid=1696 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:16.866000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:44:16.866000 audit[1696]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ddc600 a1=c000de07e0 a2=c000e08030 a3=25 items=0 ppid=1 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.866000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:44:16.867430 kubelet[1696]: I0702 07:44:16.867056 1696 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:44:16.867430 kubelet[1696]: I0702 07:44:16.867091 1696 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:44:16.867430 kubelet[1696]: I0702 07:44:16.867138 1696 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:44:16.867525 kubelet[1696]: I0702 07:44:16.867443 1696 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 07:44:16.867763 kubelet[1696]: I0702 07:44:16.867743 1696 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:44:16.872000 audit[1708]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.872000 audit[1708]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc9abe3130 a2=0 a3=7ffc9abe311c items=0 ppid=1696 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.873505 kubelet[1696]: E0702 07:44:16.873324 1696 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.39:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.39:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.17de55a0cf04c218 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2024-07-02 07:44:16.858432024 +0000 UTC m=+0.673666035,LastTimestamp:2024-07-02 07:44:16.858432024 +0000 UTC m=+0.673666035,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 2 07:44:16.873579 kubelet[1696]: I0702 07:44:16.873548 1696 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:44:16.872000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:44:16.873824 kubelet[1696]: I0702 07:44:16.873801 1696 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Jul 2 07:44:16.873883 kubelet[1696]: I0702 07:44:16.873868 1696 reconciler.go:26] "Reconciler: start to sync state" Jul 2 07:44:16.874036 kubelet[1696]: E0702 07:44:16.874006 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.39:6443: connect: connection refused" interval="200ms" Jul 2 07:44:16.874360 kubelet[1696]: E0702 07:44:16.874329 1696 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:44:16.874405 kubelet[1696]: W0702 07:44:16.874346 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.874449 kubelet[1696]: E0702 07:44:16.874403 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.874000 audit[1709]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.874000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff287c2d00 a2=0 a3=7fff287c2cec items=0 ppid=1696 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.874000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:44:16.875671 kubelet[1696]: I0702 07:44:16.875637 1696 factory.go:221] Registration of the containerd container factory successfully Jul 2 07:44:16.875671 kubelet[1696]: I0702 07:44:16.875653 1696 factory.go:221] Registration of the systemd container factory successfully Jul 2 07:44:16.875753 kubelet[1696]: I0702 07:44:16.875710 1696 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 07:44:16.875000 audit[1711]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.875000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff24a816c0 a2=0 a3=7fff24a816ac items=0 ppid=1696 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.875000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:44:16.877000 audit[1713]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.877000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffef18aa660 a2=0 a3=7ffef18aa64c items=0 ppid=1696 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:44:16.882000 audit[1717]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.882000 audit[1717]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffdb10c9340 a2=0 a3=7ffdb10c932c items=0 ppid=1696 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.882000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 07:44:16.883530 kubelet[1696]: I0702 07:44:16.883512 1696 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:44:16.883000 audit[1719]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:16.883000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff3121c2c0 a2=0 a3=7fff3121c2ac items=0 ppid=1696 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.883000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:44:16.884371 kubelet[1696]: I0702 07:44:16.884348 1696 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:44:16.884371 kubelet[1696]: I0702 07:44:16.884373 1696 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:44:16.884456 kubelet[1696]: I0702 07:44:16.884388 1696 kubelet.go:2337] "Starting kubelet main sync loop" Jul 2 07:44:16.884456 kubelet[1696]: E0702 07:44:16.884440 1696 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:44:16.884000 audit[1721]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.884000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd0f2bfa0 a2=0 a3=7ffdd0f2bf8c items=0 ppid=1696 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.884000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:44:16.885000 audit[1722]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:16.885000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd97fcda40 a2=0 a3=7ffd97fcda2c items=0 ppid=1696 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.885000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:44:16.885000 audit[1723]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.885000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda80c4550 a2=0 a3=7ffda80c453c items=0 ppid=1696 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.885000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:44:16.886000 audit[1724]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:16.886000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff8e4fde60 a2=0 a3=7fff8e4fde4c items=0 ppid=1696 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.886000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:44:16.886000 audit[1725]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:16.886000 audit[1725]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd9beef20 a2=0 a3=7fffd9beef0c items=0 ppid=1696 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.886000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:44:16.887000 audit[1726]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:16.887000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffca21aa230 a2=0 a3=7ffca21aa21c items=0 ppid=1696 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:16.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:44:16.887712 kubelet[1696]: W0702 07:44:16.887633 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.887712 kubelet[1696]: E0702 07:44:16.887673 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:16.888296 kubelet[1696]: I0702 07:44:16.888266 1696 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:44:16.888296 kubelet[1696]: I0702 07:44:16.888282 1696 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:44:16.888296 kubelet[1696]: I0702 07:44:16.888297 1696 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:44:16.975241 kubelet[1696]: I0702 07:44:16.975223 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:44:16.975519 kubelet[1696]: E0702 07:44:16.975497 1696 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.39:6443/api/v1/nodes\": dial tcp 10.0.0.39:6443: connect: connection refused" node="localhost" Jul 2 07:44:16.984568 kubelet[1696]: E0702 07:44:16.984538 1696 kubelet.go:2361] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 07:44:17.075126 kubelet[1696]: E0702 07:44:17.075046 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.39:6443: connect: connection refused" interval="400ms" Jul 2 07:44:17.177305 kubelet[1696]: I0702 07:44:17.177287 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:44:17.177556 kubelet[1696]: E0702 07:44:17.177535 1696 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.39:6443/api/v1/nodes\": dial tcp 10.0.0.39:6443: connect: connection refused" node="localhost" Jul 2 07:44:17.184653 kubelet[1696]: E0702 07:44:17.184607 1696 kubelet.go:2361] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 07:44:17.386215 kubelet[1696]: I0702 07:44:17.386095 1696 policy_none.go:49] "None policy: Start" Jul 2 07:44:17.387089 kubelet[1696]: I0702 07:44:17.387066 1696 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 07:44:17.387134 kubelet[1696]: I0702 07:44:17.387107 1696 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:44:17.395918 systemd[1]: Created slice kubepods.slice. Jul 2 07:44:17.399309 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 07:44:17.401738 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 07:44:17.409252 kubelet[1696]: I0702 07:44:17.409221 1696 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:44:17.409252 kubelet[1696]: I0702 07:44:17.409277 1696 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:44:17.408000 audit[1696]: AVC avc: denied { mac_admin } for pid=1696 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:17.408000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:44:17.408000 audit[1696]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000eecc60 a1=c000ef8738 a2=c000eecc30 a3=25 items=0 ppid=1 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:17.408000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:44:17.409564 kubelet[1696]: I0702 07:44:17.409384 1696 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 2 07:44:17.409564 kubelet[1696]: I0702 07:44:17.409521 1696 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:44:17.411380 kubelet[1696]: E0702 07:44:17.411353 1696 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 2 07:44:17.475732 kubelet[1696]: E0702 07:44:17.475671 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.39:6443: connect: connection refused" interval="800ms" Jul 2 07:44:17.579243 kubelet[1696]: I0702 07:44:17.579196 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:44:17.579606 kubelet[1696]: E0702 07:44:17.579582 1696 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.39:6443/api/v1/nodes\": dial tcp 10.0.0.39:6443: connect: connection refused" node="localhost" Jul 2 07:44:17.585715 kubelet[1696]: I0702 07:44:17.585681 1696 topology_manager.go:215] "Topology Admit Handler" podUID="5df30d679156d9b860331584e2d47675" podNamespace="kube-system" podName="kube-scheduler-localhost" Jul 2 07:44:17.586574 kubelet[1696]: I0702 07:44:17.586540 1696 topology_manager.go:215] "Topology Admit Handler" podUID="d2e30c3a221aad55712fb7759d2fdde3" podNamespace="kube-system" podName="kube-apiserver-localhost" Jul 2 07:44:17.587268 kubelet[1696]: I0702 07:44:17.587229 1696 topology_manager.go:215] "Topology Admit Handler" podUID="fd87124bd1ab6d9b01dedf07aaa171f7" podNamespace="kube-system" podName="kube-controller-manager-localhost" Jul 2 07:44:17.592935 systemd[1]: Created slice kubepods-burstable-pod5df30d679156d9b860331584e2d47675.slice. Jul 2 07:44:17.615117 systemd[1]: Created slice kubepods-burstable-podd2e30c3a221aad55712fb7759d2fdde3.slice. Jul 2 07:44:17.618303 systemd[1]: Created slice kubepods-burstable-podfd87124bd1ab6d9b01dedf07aaa171f7.slice. Jul 2 07:44:17.677977 kubelet[1696]: I0702 07:44:17.677935 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5df30d679156d9b860331584e2d47675-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"5df30d679156d9b860331584e2d47675\") " pod="kube-system/kube-scheduler-localhost" Jul 2 07:44:17.677977 kubelet[1696]: I0702 07:44:17.677983 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:17.678177 kubelet[1696]: I0702 07:44:17.678002 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:17.678177 kubelet[1696]: I0702 07:44:17.678104 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:17.678177 kubelet[1696]: I0702 07:44:17.678142 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d2e30c3a221aad55712fb7759d2fdde3-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d2e30c3a221aad55712fb7759d2fdde3\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:17.678177 kubelet[1696]: I0702 07:44:17.678159 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d2e30c3a221aad55712fb7759d2fdde3-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d2e30c3a221aad55712fb7759d2fdde3\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:17.678177 kubelet[1696]: I0702 07:44:17.678173 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d2e30c3a221aad55712fb7759d2fdde3-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d2e30c3a221aad55712fb7759d2fdde3\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:17.678348 kubelet[1696]: I0702 07:44:17.678188 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:17.678348 kubelet[1696]: I0702 07:44:17.678255 1696 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:17.749582 kubelet[1696]: W0702 07:44:17.749526 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:17.749582 kubelet[1696]: E0702 07:44:17.749586 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.39:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:17.913633 kubelet[1696]: E0702 07:44:17.913586 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:17.914289 env[1197]: time="2024-07-02T07:44:17.914226713Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:5df30d679156d9b860331584e2d47675,Namespace:kube-system,Attempt:0,}" Jul 2 07:44:17.917405 kubelet[1696]: E0702 07:44:17.917381 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:17.917906 env[1197]: time="2024-07-02T07:44:17.917851595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d2e30c3a221aad55712fb7759d2fdde3,Namespace:kube-system,Attempt:0,}" Jul 2 07:44:17.919931 kubelet[1696]: E0702 07:44:17.919909 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:17.920224 env[1197]: time="2024-07-02T07:44:17.920187427Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:fd87124bd1ab6d9b01dedf07aaa171f7,Namespace:kube-system,Attempt:0,}" Jul 2 07:44:17.950803 kubelet[1696]: W0702 07:44:17.950672 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:17.950803 kubelet[1696]: E0702 07:44:17.950724 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.39:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:17.974120 kubelet[1696]: W0702 07:44:17.974073 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:17.974120 kubelet[1696]: E0702 07:44:17.974101 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.39:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:18.228866 kubelet[1696]: W0702 07:44:18.228744 1696 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:18.228866 kubelet[1696]: E0702 07:44:18.228816 1696 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.39:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.39:6443: connect: connection refused Jul 2 07:44:18.276196 kubelet[1696]: E0702 07:44:18.276154 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.39:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.39:6443: connect: connection refused" interval="1.6s" Jul 2 07:44:18.380810 kubelet[1696]: I0702 07:44:18.380781 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:44:18.381088 kubelet[1696]: E0702 07:44:18.381062 1696 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.39:6443/api/v1/nodes\": dial tcp 10.0.0.39:6443: connect: connection refused" node="localhost" Jul 2 07:44:18.471575 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4229295678.mount: Deactivated successfully. Jul 2 07:44:18.476901 env[1197]: time="2024-07-02T07:44:18.476835089Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.480588 env[1197]: time="2024-07-02T07:44:18.480489936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.483247 env[1197]: time="2024-07-02T07:44:18.483197405Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.487086 env[1197]: time="2024-07-02T07:44:18.487033011Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.489793 env[1197]: time="2024-07-02T07:44:18.489751552Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.490861 env[1197]: time="2024-07-02T07:44:18.490823379Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.492122 env[1197]: time="2024-07-02T07:44:18.492092476Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.492736 env[1197]: time="2024-07-02T07:44:18.492698825Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.494301 env[1197]: time="2024-07-02T07:44:18.494254745Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.495622 env[1197]: time="2024-07-02T07:44:18.495584729Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.497190 env[1197]: time="2024-07-02T07:44:18.497151951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.498646 env[1197]: time="2024-07-02T07:44:18.498623407Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:18.535105 env[1197]: time="2024-07-02T07:44:18.535037194Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:44:18.535105 env[1197]: time="2024-07-02T07:44:18.535074506Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:44:18.535302 env[1197]: time="2024-07-02T07:44:18.535086199Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:44:18.535302 env[1197]: time="2024-07-02T07:44:18.535248511Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d0b545e39267aad0ce7e2badd2d815061bebc49304bbcc37a15af9853f9076f8 pid=1742 runtime=io.containerd.runc.v2 Jul 2 07:44:18.541421 env[1197]: time="2024-07-02T07:44:18.541027263Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:44:18.541421 env[1197]: time="2024-07-02T07:44:18.541067310Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:44:18.541421 env[1197]: time="2024-07-02T07:44:18.541079654Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:44:18.541421 env[1197]: time="2024-07-02T07:44:18.541196760Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/06b1ec1fd21347d5b6009e8b4d56e0fe25b5308b14776cb703e273b52aaa77b2 pid=1759 runtime=io.containerd.runc.v2 Jul 2 07:44:18.545389 env[1197]: time="2024-07-02T07:44:18.545311112Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:44:18.545624 env[1197]: time="2024-07-02T07:44:18.545595711Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:44:18.545741 env[1197]: time="2024-07-02T07:44:18.545714310Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:44:18.546026 env[1197]: time="2024-07-02T07:44:18.545996595Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3d8ef48f560aef559ba6a4eed0ed6deaf1f8764f4b7ffc99c302fca5c351e169 pid=1778 runtime=io.containerd.runc.v2 Jul 2 07:44:18.547860 systemd[1]: Started cri-containerd-d0b545e39267aad0ce7e2badd2d815061bebc49304bbcc37a15af9853f9076f8.scope. Jul 2 07:44:18.556373 systemd[1]: Started cri-containerd-06b1ec1fd21347d5b6009e8b4d56e0fe25b5308b14776cb703e273b52aaa77b2.scope. Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.561000 audit: BPF prog-id=61 op=LOAD Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1742 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623534356533393236376161643063653765326261646432643831 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1742 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623534356533393236376161643063653765326261646432643831 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit: BPF prog-id=62 op=LOAD Jul 2 07:44:18.562000 audit[1754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a1430 items=0 ppid=1742 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623534356533393236376161643063653765326261646432643831 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit: BPF prog-id=63 op=LOAD Jul 2 07:44:18.562000 audit[1754]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a1478 items=0 ppid=1742 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623534356533393236376161643063653765326261646432643831 Jul 2 07:44:18.562000 audit: BPF prog-id=63 op=UNLOAD Jul 2 07:44:18.562000 audit: BPF prog-id=62 op=UNLOAD Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { perfmon } for pid=1754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit[1754]: AVC avc: denied { bpf } for pid=1754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.562000 audit: BPF prog-id=64 op=LOAD Jul 2 07:44:18.562000 audit[1754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a1888 items=0 ppid=1742 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623534356533393236376161643063653765326261646432643831 Jul 2 07:44:18.568610 systemd[1]: Started cri-containerd-3d8ef48f560aef559ba6a4eed0ed6deaf1f8764f4b7ffc99c302fca5c351e169.scope. Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.570000 audit: BPF prog-id=65 op=LOAD Jul 2 07:44:18.571000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.571000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1759 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623165633166643231333437643562363030396538623464353665 Jul 2 07:44:18.571000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.571000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1759 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623165633166643231333437643562363030396538623464353665 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.572000 audit: BPF prog-id=66 op=LOAD Jul 2 07:44:18.572000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024390 items=0 ppid=1759 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623165633166643231333437643562363030396538623464353665 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.573000 audit: BPF prog-id=67 op=LOAD Jul 2 07:44:18.573000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000243d8 items=0 ppid=1759 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623165633166643231333437643562363030396538623464353665 Jul 2 07:44:18.573000 audit: BPF prog-id=67 op=UNLOAD Jul 2 07:44:18.574000 audit: BPF prog-id=66 op=UNLOAD Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { perfmon } for pid=1777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit[1777]: AVC avc: denied { bpf } for pid=1777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.574000 audit: BPF prog-id=68 op=LOAD Jul 2 07:44:18.574000 audit[1777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000247e8 items=0 ppid=1759 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623165633166643231333437643562363030396538623464353665 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.588000 audit: BPF prog-id=69 op=LOAD Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=1778 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386566343866353630616566353539626136613465656430656436 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=1778 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386566343866353630616566353539626136613465656430656436 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.590000 audit: BPF prog-id=70 op=LOAD Jul 2 07:44:18.590000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000318610 items=0 ppid=1778 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386566343866353630616566353539626136613465656430656436 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593734 env[1197]: time="2024-07-02T07:44:18.593688075Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:fd87124bd1ab6d9b01dedf07aaa171f7,Namespace:kube-system,Attempt:0,} returns sandbox id \"d0b545e39267aad0ce7e2badd2d815061bebc49304bbcc37a15af9853f9076f8\"" Jul 2 07:44:18.591000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.591000 audit: BPF prog-id=71 op=LOAD Jul 2 07:44:18.591000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000318658 items=0 ppid=1778 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386566343866353630616566353539626136613465656430656436 Jul 2 07:44:18.592000 audit: BPF prog-id=71 op=UNLOAD Jul 2 07:44:18.592000 audit: BPF prog-id=70 op=UNLOAD Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { perfmon } for pid=1795 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.594978 kubelet[1696]: E0702 07:44:18.594905 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:18.593000 audit[1795]: AVC avc: denied { bpf } for pid=1795 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.593000 audit: BPF prog-id=72 op=LOAD Jul 2 07:44:18.597487 env[1197]: time="2024-07-02T07:44:18.597447103Z" level=info msg="CreateContainer within sandbox \"d0b545e39267aad0ce7e2badd2d815061bebc49304bbcc37a15af9853f9076f8\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 07:44:18.593000 audit[1795]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000318a68 items=0 ppid=1778 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364386566343866353630616566353539626136613465656430656436 Jul 2 07:44:18.610191 env[1197]: time="2024-07-02T07:44:18.610077374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:5df30d679156d9b860331584e2d47675,Namespace:kube-system,Attempt:0,} returns sandbox id \"06b1ec1fd21347d5b6009e8b4d56e0fe25b5308b14776cb703e273b52aaa77b2\"" Jul 2 07:44:18.611978 kubelet[1696]: E0702 07:44:18.611876 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:18.614090 env[1197]: time="2024-07-02T07:44:18.614063500Z" level=info msg="CreateContainer within sandbox \"06b1ec1fd21347d5b6009e8b4d56e0fe25b5308b14776cb703e273b52aaa77b2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 07:44:18.621322 env[1197]: time="2024-07-02T07:44:18.621275855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d2e30c3a221aad55712fb7759d2fdde3,Namespace:kube-system,Attempt:0,} returns sandbox id \"3d8ef48f560aef559ba6a4eed0ed6deaf1f8764f4b7ffc99c302fca5c351e169\"" Jul 2 07:44:18.622139 kubelet[1696]: E0702 07:44:18.621922 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:18.623827 env[1197]: time="2024-07-02T07:44:18.623794351Z" level=info msg="CreateContainer within sandbox \"3d8ef48f560aef559ba6a4eed0ed6deaf1f8764f4b7ffc99c302fca5c351e169\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 07:44:18.639644 env[1197]: time="2024-07-02T07:44:18.639603342Z" level=info msg="CreateContainer within sandbox \"d0b545e39267aad0ce7e2badd2d815061bebc49304bbcc37a15af9853f9076f8\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"93e5d178dc39fd0096039883d32b17e2b34fa64c7e777b1a2c46c12a5c5fbe36\"" Jul 2 07:44:18.640144 env[1197]: time="2024-07-02T07:44:18.640119136Z" level=info msg="StartContainer for \"93e5d178dc39fd0096039883d32b17e2b34fa64c7e777b1a2c46c12a5c5fbe36\"" Jul 2 07:44:18.644456 env[1197]: time="2024-07-02T07:44:18.644427863Z" level=info msg="CreateContainer within sandbox \"06b1ec1fd21347d5b6009e8b4d56e0fe25b5308b14776cb703e273b52aaa77b2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"2ae9b23f69ea826c2c6c0e0aacd1c766be546399d0ddca16bfa0e1086e5aee09\"" Jul 2 07:44:18.645052 env[1197]: time="2024-07-02T07:44:18.645030064Z" level=info msg="StartContainer for \"2ae9b23f69ea826c2c6c0e0aacd1c766be546399d0ddca16bfa0e1086e5aee09\"" Jul 2 07:44:18.647812 env[1197]: time="2024-07-02T07:44:18.647765909Z" level=info msg="CreateContainer within sandbox \"3d8ef48f560aef559ba6a4eed0ed6deaf1f8764f4b7ffc99c302fca5c351e169\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"356cc36161f120d878ae41985ef86e2319d94a4f2f1e8d068904193c67de27bd\"" Jul 2 07:44:18.648462 env[1197]: time="2024-07-02T07:44:18.648432373Z" level=info msg="StartContainer for \"356cc36161f120d878ae41985ef86e2319d94a4f2f1e8d068904193c67de27bd\"" Jul 2 07:44:18.654507 systemd[1]: Started cri-containerd-93e5d178dc39fd0096039883d32b17e2b34fa64c7e777b1a2c46c12a5c5fbe36.scope. Jul 2 07:44:18.669303 systemd[1]: Started cri-containerd-2ae9b23f69ea826c2c6c0e0aacd1c766be546399d0ddca16bfa0e1086e5aee09.scope. Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit: BPF prog-id=73 op=LOAD Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1742 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653564313738646333396664303039363033393838336433326231 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1742 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653564313738646333396664303039363033393838336433326231 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit: BPF prog-id=74 op=LOAD Jul 2 07:44:18.671000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030a510 items=0 ppid=1742 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653564313738646333396664303039363033393838336433326231 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.671000 audit: BPF prog-id=75 op=LOAD Jul 2 07:44:18.671000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030a558 items=0 ppid=1742 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653564313738646333396664303039363033393838336433326231 Jul 2 07:44:18.671000 audit: BPF prog-id=75 op=UNLOAD Jul 2 07:44:18.672000 audit: BPF prog-id=74 op=UNLOAD Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { perfmon } for pid=1864 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit[1864]: AVC avc: denied { bpf } for pid=1864 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.672000 audit: BPF prog-id=76 op=LOAD Jul 2 07:44:18.672000 audit[1864]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030a968 items=0 ppid=1742 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933653564313738646333396664303039363033393838336433326231 Jul 2 07:44:18.681045 systemd[1]: Started cri-containerd-356cc36161f120d878ae41985ef86e2319d94a4f2f1e8d068904193c67de27bd.scope. Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.682000 audit: BPF prog-id=77 op=LOAD Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1759 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653962323366363965613832366332633663306530616163643163 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1759 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653962323366363965613832366332633663306530616163643163 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit: BPF prog-id=78 op=LOAD Jul 2 07:44:18.684000 audit[1883]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00019ada0 items=0 ppid=1759 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653962323366363965613832366332633663306530616163643163 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit: BPF prog-id=79 op=LOAD Jul 2 07:44:18.684000 audit[1883]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019ade8 items=0 ppid=1759 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653962323366363965613832366332633663306530616163643163 Jul 2 07:44:18.684000 audit: BPF prog-id=79 op=UNLOAD Jul 2 07:44:18.684000 audit: BPF prog-id=78 op=UNLOAD Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { perfmon } for pid=1883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit[1883]: AVC avc: denied { bpf } for pid=1883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.684000 audit: BPF prog-id=80 op=LOAD Jul 2 07:44:18.684000 audit[1883]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00019b1f8 items=0 ppid=1759 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653962323366363965613832366332633663306530616163643163 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.689000 audit: BPF prog-id=81 op=LOAD Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1778 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335366363333631363166313230643837386165343139383565663836 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1778 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335366363333631363166313230643837386165343139383565663836 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit: BPF prog-id=82 op=LOAD Jul 2 07:44:18.690000 audit[1889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000189b30 items=0 ppid=1778 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335366363333631363166313230643837386165343139383565663836 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit: BPF prog-id=83 op=LOAD Jul 2 07:44:18.690000 audit[1889]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000189b78 items=0 ppid=1778 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335366363333631363166313230643837386165343139383565663836 Jul 2 07:44:18.690000 audit: BPF prog-id=83 op=UNLOAD Jul 2 07:44:18.690000 audit: BPF prog-id=82 op=UNLOAD Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { perfmon } for pid=1889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit[1889]: AVC avc: denied { bpf } for pid=1889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:18.690000 audit: BPF prog-id=84 op=LOAD Jul 2 07:44:18.690000 audit[1889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000189f88 items=0 ppid=1778 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:18.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335366363333631363166313230643837386165343139383565663836 Jul 2 07:44:18.719976 env[1197]: time="2024-07-02T07:44:18.719916758Z" level=info msg="StartContainer for \"2ae9b23f69ea826c2c6c0e0aacd1c766be546399d0ddca16bfa0e1086e5aee09\" returns successfully" Jul 2 07:44:18.721633 env[1197]: time="2024-07-02T07:44:18.721602318Z" level=info msg="StartContainer for \"93e5d178dc39fd0096039883d32b17e2b34fa64c7e777b1a2c46c12a5c5fbe36\" returns successfully" Jul 2 07:44:18.735755 env[1197]: time="2024-07-02T07:44:18.735650874Z" level=info msg="StartContainer for \"356cc36161f120d878ae41985ef86e2319d94a4f2f1e8d068904193c67de27bd\" returns successfully" Jul 2 07:44:18.892632 kubelet[1696]: E0702 07:44:18.892603 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:18.893572 kubelet[1696]: E0702 07:44:18.893558 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:18.895207 kubelet[1696]: E0702 07:44:18.895168 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:19.802000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.805678 kernel: kauditd_printk_skb: 557 callbacks suppressed Jul 2 07:44:19.805716 kernel: audit: type=1400 audit(1719906259.802:551): avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.802000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00477c030 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.814443 kernel: audit: type=1300 audit(1719906259.802:551): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00477c030 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.814501 kernel: audit: type=1327 audit(1719906259.802:551): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.802000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.803000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.823048 kernel: audit: type=1400 audit(1719906259.803:552): avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.823094 kernel: audit: type=1300 audit(1719906259.803:552): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006556090 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.803000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006556090 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.803000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.832499 kernel: audit: type=1327 audit(1719906259.803:552): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.804000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.838510 kernel: audit: type=1400 audit(1719906259.804:553): avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.804000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00424ec60 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.804000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.848155 kernel: audit: type=1300 audit(1719906259.804:553): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00424ec60 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.848210 kernel: audit: type=1327 audit(1719906259.804:553): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.806000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.806000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00424efe0 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.806000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.806000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.806000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00636bd10 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.806000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.838000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.838000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=88 a1=c004e926f0 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:44:19.838000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:44:19.853500 kernel: audit: type=1400 audit(1719906259.806:554): avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:19.896749 kubelet[1696]: E0702 07:44:19.896697 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:19.920502 kubelet[1696]: E0702 07:44:19.920447 1696 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 2 07:44:19.982487 kubelet[1696]: I0702 07:44:19.982436 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:44:19.987425 kubelet[1696]: I0702 07:44:19.987400 1696 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Jul 2 07:44:20.000058 kubelet[1696]: E0702 07:44:20.000000 1696 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 2 07:44:20.040000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:20.040000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007ac150 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:44:20.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:44:20.040000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:20.040000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d8e000 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:44:20.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:44:20.100169 kubelet[1696]: E0702 07:44:20.100054 1696 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 2 07:44:20.849167 kubelet[1696]: I0702 07:44:20.849102 1696 apiserver.go:52] "Watching apiserver" Jul 2 07:44:20.874341 kubelet[1696]: I0702 07:44:20.874305 1696 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Jul 2 07:44:22.616335 systemd[1]: Reloading. Jul 2 07:44:22.689906 /usr/lib/systemd/system-generators/torcx-generator[1994]: time="2024-07-02T07:44:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:44:22.689936 /usr/lib/systemd/system-generators/torcx-generator[1994]: time="2024-07-02T07:44:22Z" level=info msg="torcx already run" Jul 2 07:44:22.737347 kubelet[1696]: E0702 07:44:22.737303 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:22.757918 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:44:22.757934 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:44:22.773074 kubelet[1696]: E0702 07:44:22.773046 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:22.777102 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit: BPF prog-id=85 op=LOAD Jul 2 07:44:22.845000 audit: BPF prog-id=46 op=UNLOAD Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit: BPF prog-id=86 op=LOAD Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.845000 audit: BPF prog-id=87 op=LOAD Jul 2 07:44:22.845000 audit: BPF prog-id=47 op=UNLOAD Jul 2 07:44:22.845000 audit: BPF prog-id=48 op=UNLOAD Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.846000 audit: BPF prog-id=88 op=LOAD Jul 2 07:44:22.846000 audit: BPF prog-id=49 op=UNLOAD Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit: BPF prog-id=89 op=LOAD Jul 2 07:44:22.847000 audit: BPF prog-id=81 op=UNLOAD Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.847000 audit: BPF prog-id=90 op=LOAD Jul 2 07:44:22.848000 audit: BPF prog-id=50 op=UNLOAD Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit: BPF prog-id=91 op=LOAD Jul 2 07:44:22.848000 audit: BPF prog-id=51 op=UNLOAD Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit: BPF prog-id=92 op=LOAD Jul 2 07:44:22.849000 audit: BPF prog-id=73 op=UNLOAD Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit: BPF prog-id=93 op=LOAD Jul 2 07:44:22.850000 audit: BPF prog-id=61 op=UNLOAD Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit: BPF prog-id=94 op=LOAD Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.850000 audit: BPF prog-id=95 op=LOAD Jul 2 07:44:22.850000 audit: BPF prog-id=52 op=UNLOAD Jul 2 07:44:22.850000 audit: BPF prog-id=53 op=UNLOAD Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.851000 audit: BPF prog-id=96 op=LOAD Jul 2 07:44:22.851000 audit: BPF prog-id=69 op=UNLOAD Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit: BPF prog-id=97 op=LOAD Jul 2 07:44:22.852000 audit: BPF prog-id=54 op=UNLOAD Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.852000 audit: BPF prog-id=98 op=LOAD Jul 2 07:44:22.853000 audit: BPF prog-id=65 op=UNLOAD Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit: BPF prog-id=99 op=LOAD Jul 2 07:44:22.853000 audit: BPF prog-id=55 op=UNLOAD Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit: BPF prog-id=100 op=LOAD Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit: BPF prog-id=101 op=LOAD Jul 2 07:44:22.853000 audit: BPF prog-id=56 op=UNLOAD Jul 2 07:44:22.853000 audit: BPF prog-id=57 op=UNLOAD Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.854000 audit: BPF prog-id=102 op=LOAD Jul 2 07:44:22.854000 audit: BPF prog-id=77 op=UNLOAD Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit: BPF prog-id=103 op=LOAD Jul 2 07:44:22.855000 audit: BPF prog-id=58 op=UNLOAD Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit: BPF prog-id=104 op=LOAD Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:22.855000 audit: BPF prog-id=105 op=LOAD Jul 2 07:44:22.855000 audit: BPF prog-id=59 op=UNLOAD Jul 2 07:44:22.855000 audit: BPF prog-id=60 op=UNLOAD Jul 2 07:44:22.867526 systemd[1]: Stopping kubelet.service... Jul 2 07:44:22.867733 kubelet[1696]: I0702 07:44:22.867559 1696 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:44:22.890902 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 07:44:22.891130 systemd[1]: Stopped kubelet.service. Jul 2 07:44:22.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:22.891202 systemd[1]: kubelet.service: Consumed 1.097s CPU time. Jul 2 07:44:22.892956 systemd[1]: Starting kubelet.service... Jul 2 07:44:22.970611 systemd[1]: Started kubelet.service. Jul 2 07:44:22.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:23.105827 kubelet[2039]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:44:23.105827 kubelet[2039]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:44:23.105827 kubelet[2039]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:44:23.106283 kubelet[2039]: I0702 07:44:23.106229 2039 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:44:23.112072 kubelet[2039]: I0702 07:44:23.112034 2039 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Jul 2 07:44:23.112072 kubelet[2039]: I0702 07:44:23.112055 2039 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:44:23.112302 kubelet[2039]: I0702 07:44:23.112278 2039 server.go:927] "Client rotation is on, will bootstrap in background" Jul 2 07:44:23.114361 kubelet[2039]: I0702 07:44:23.114328 2039 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 07:44:23.115542 kubelet[2039]: I0702 07:44:23.115496 2039 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:44:23.121990 kubelet[2039]: I0702 07:44:23.121888 2039 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:44:23.122175 kubelet[2039]: I0702 07:44:23.122135 2039 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:44:23.122357 kubelet[2039]: I0702 07:44:23.122166 2039 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:44:23.122478 kubelet[2039]: I0702 07:44:23.122367 2039 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:44:23.122478 kubelet[2039]: I0702 07:44:23.122379 2039 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:44:23.122478 kubelet[2039]: I0702 07:44:23.122450 2039 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:44:23.122611 kubelet[2039]: I0702 07:44:23.122568 2039 kubelet.go:400] "Attempting to sync node with API server" Jul 2 07:44:23.122611 kubelet[2039]: I0702 07:44:23.122582 2039 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:44:23.122611 kubelet[2039]: I0702 07:44:23.122603 2039 kubelet.go:312] "Adding apiserver pod source" Jul 2 07:44:23.122696 kubelet[2039]: I0702 07:44:23.122617 2039 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:44:23.123211 kubelet[2039]: I0702 07:44:23.123182 2039 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:44:23.123326 kubelet[2039]: I0702 07:44:23.123302 2039 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 07:44:23.123692 kubelet[2039]: I0702 07:44:23.123627 2039 server.go:1264] "Started kubelet" Jul 2 07:44:23.123000 audit[2039]: AVC avc: denied { mac_admin } for pid=2039 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:23.123000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:44:23.123000 audit[2039]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ce00c0 a1=c00005b188 a2=c000ce0090 a3=25 items=0 ppid=1 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:23.123000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:44:23.123000 audit[2039]: AVC avc: denied { mac_admin } for pid=2039 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:23.123000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:44:23.123000 audit[2039]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007d5040 a1=c00005b1a0 a2=c000ce0150 a3=25 items=0 ppid=1 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:23.123000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:44:23.126294 kubelet[2039]: I0702 07:44:23.125015 2039 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:44:23.126294 kubelet[2039]: I0702 07:44:23.125048 2039 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:44:23.126294 kubelet[2039]: I0702 07:44:23.125068 2039 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:44:23.126294 kubelet[2039]: I0702 07:44:23.125966 2039 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:44:23.127196 kubelet[2039]: I0702 07:44:23.127171 2039 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:44:23.127532 kubelet[2039]: I0702 07:44:23.127457 2039 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 07:44:23.127675 kubelet[2039]: I0702 07:44:23.127650 2039 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Jul 2 07:44:23.127909 kubelet[2039]: I0702 07:44:23.127887 2039 reconciler.go:26] "Reconciler: start to sync state" Jul 2 07:44:23.128110 kubelet[2039]: I0702 07:44:23.128094 2039 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:44:23.131271 kubelet[2039]: I0702 07:44:23.131249 2039 server.go:455] "Adding debug handlers to kubelet server" Jul 2 07:44:23.136273 kubelet[2039]: I0702 07:44:23.136242 2039 factory.go:221] Registration of the systemd container factory successfully Jul 2 07:44:23.136341 kubelet[2039]: I0702 07:44:23.136310 2039 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 07:44:23.145263 kubelet[2039]: E0702 07:44:23.143882 2039 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:44:23.145263 kubelet[2039]: I0702 07:44:23.144420 2039 factory.go:221] Registration of the containerd container factory successfully Jul 2 07:44:23.146910 kubelet[2039]: I0702 07:44:23.146874 2039 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:44:23.147587 kubelet[2039]: I0702 07:44:23.147563 2039 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:44:23.147634 kubelet[2039]: I0702 07:44:23.147593 2039 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:44:23.147634 kubelet[2039]: I0702 07:44:23.147613 2039 kubelet.go:2337] "Starting kubelet main sync loop" Jul 2 07:44:23.147695 kubelet[2039]: E0702 07:44:23.147660 2039 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:44:23.169544 kubelet[2039]: I0702 07:44:23.169511 2039 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:44:23.169544 kubelet[2039]: I0702 07:44:23.169528 2039 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:44:23.169544 kubelet[2039]: I0702 07:44:23.169551 2039 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:44:23.169766 kubelet[2039]: I0702 07:44:23.169706 2039 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 07:44:23.169766 kubelet[2039]: I0702 07:44:23.169718 2039 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 07:44:23.169766 kubelet[2039]: I0702 07:44:23.169740 2039 policy_none.go:49] "None policy: Start" Jul 2 07:44:23.170215 kubelet[2039]: I0702 07:44:23.170194 2039 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 07:44:23.170279 kubelet[2039]: I0702 07:44:23.170222 2039 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:44:23.170358 kubelet[2039]: I0702 07:44:23.170345 2039 state_mem.go:75] "Updated machine memory state" Jul 2 07:44:23.173780 kubelet[2039]: I0702 07:44:23.173748 2039 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:44:23.172000 audit[2039]: AVC avc: denied { mac_admin } for pid=2039 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:23.172000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:44:23.172000 audit[2039]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f28a80 a1=c001168300 a2=c000f28a50 a3=25 items=0 ppid=1 pid=2039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:23.172000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:44:23.174093 kubelet[2039]: I0702 07:44:23.173810 2039 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:44:23.174093 kubelet[2039]: I0702 07:44:23.173955 2039 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 2 07:44:23.174093 kubelet[2039]: I0702 07:44:23.174060 2039 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:44:23.230989 kubelet[2039]: I0702 07:44:23.230949 2039 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:44:23.235090 kubelet[2039]: I0702 07:44:23.235075 2039 kubelet_node_status.go:112] "Node was previously registered" node="localhost" Jul 2 07:44:23.235159 kubelet[2039]: I0702 07:44:23.235133 2039 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Jul 2 07:44:23.248647 kubelet[2039]: I0702 07:44:23.248606 2039 topology_manager.go:215] "Topology Admit Handler" podUID="d2e30c3a221aad55712fb7759d2fdde3" podNamespace="kube-system" podName="kube-apiserver-localhost" Jul 2 07:44:23.248711 kubelet[2039]: I0702 07:44:23.248691 2039 topology_manager.go:215] "Topology Admit Handler" podUID="fd87124bd1ab6d9b01dedf07aaa171f7" podNamespace="kube-system" podName="kube-controller-manager-localhost" Jul 2 07:44:23.248753 kubelet[2039]: I0702 07:44:23.248743 2039 topology_manager.go:215] "Topology Admit Handler" podUID="5df30d679156d9b860331584e2d47675" podNamespace="kube-system" podName="kube-scheduler-localhost" Jul 2 07:44:23.252784 kubelet[2039]: E0702 07:44:23.252760 2039 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 2 07:44:23.252898 kubelet[2039]: E0702 07:44:23.252798 2039 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:23.329066 kubelet[2039]: I0702 07:44:23.329039 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:23.329118 kubelet[2039]: I0702 07:44:23.329073 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:23.329118 kubelet[2039]: I0702 07:44:23.329094 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d2e30c3a221aad55712fb7759d2fdde3-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d2e30c3a221aad55712fb7759d2fdde3\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:23.329118 kubelet[2039]: I0702 07:44:23.329109 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d2e30c3a221aad55712fb7759d2fdde3-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d2e30c3a221aad55712fb7759d2fdde3\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:23.329190 kubelet[2039]: I0702 07:44:23.329123 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:23.329190 kubelet[2039]: I0702 07:44:23.329135 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:23.329190 kubelet[2039]: I0702 07:44:23.329149 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fd87124bd1ab6d9b01dedf07aaa171f7-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"fd87124bd1ab6d9b01dedf07aaa171f7\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:44:23.329190 kubelet[2039]: I0702 07:44:23.329164 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5df30d679156d9b860331584e2d47675-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"5df30d679156d9b860331584e2d47675\") " pod="kube-system/kube-scheduler-localhost" Jul 2 07:44:23.329190 kubelet[2039]: I0702 07:44:23.329179 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d2e30c3a221aad55712fb7759d2fdde3-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d2e30c3a221aad55712fb7759d2fdde3\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:23.552451 kubelet[2039]: E0702 07:44:23.552423 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:23.554137 kubelet[2039]: E0702 07:44:23.554094 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:23.554270 kubelet[2039]: E0702 07:44:23.554250 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:24.123539 kubelet[2039]: I0702 07:44:24.123510 2039 apiserver.go:52] "Watching apiserver" Jul 2 07:44:24.127849 kubelet[2039]: I0702 07:44:24.127825 2039 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Jul 2 07:44:24.150000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 07:44:24.150000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000653780 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:44:24.150000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:44:24.160039 kubelet[2039]: E0702 07:44:24.159994 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:24.160682 kubelet[2039]: E0702 07:44:24.160665 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:24.165666 kubelet[2039]: E0702 07:44:24.165617 2039 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 2 07:44:24.166108 kubelet[2039]: E0702 07:44:24.166085 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:24.189993 kubelet[2039]: I0702 07:44:24.189907 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.189885067 podStartE2EDuration="2.189885067s" podCreationTimestamp="2024-07-02 07:44:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:44:24.181202654 +0000 UTC m=+1.207655470" watchObservedRunningTime="2024-07-02 07:44:24.189885067 +0000 UTC m=+1.216337884" Jul 2 07:44:24.199807 kubelet[2039]: I0702 07:44:24.199743 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.199723791 podStartE2EDuration="2.199723791s" podCreationTimestamp="2024-07-02 07:44:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:44:24.191245057 +0000 UTC m=+1.217697873" watchObservedRunningTime="2024-07-02 07:44:24.199723791 +0000 UTC m=+1.226176607" Jul 2 07:44:24.627000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:24.627000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f71f20 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:44:24.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:44:24.627000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:24.627000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00128e0c0 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:44:24.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:44:24.628000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:24.628000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de59c0 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:44:24.628000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:44:24.627000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:44:24.627000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ed3b00 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:44:24.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:44:25.161868 kubelet[2039]: E0702 07:44:25.161805 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:25.162741 kubelet[2039]: E0702 07:44:25.162704 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:26.162783 kubelet[2039]: E0702 07:44:26.162735 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:27.815904 sudo[1339]: pam_unix(sudo:session): session closed for user root Jul 2 07:44:27.814000 audit[1339]: USER_END pid=1339 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:44:27.817157 kernel: kauditd_printk_skb: 287 callbacks suppressed Jul 2 07:44:27.817283 kernel: audit: type=1106 audit(1719906267.814:813): pid=1339 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:44:27.817580 sshd[1336]: pam_unix(sshd:session): session closed for user core Jul 2 07:44:27.814000 audit[1339]: CRED_DISP pid=1339 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:44:27.823873 systemd-logind[1189]: Session 7 logged out. Waiting for processes to exit. Jul 2 07:44:27.824126 systemd[1]: sshd@6-10.0.0.39:22-10.0.0.1:54992.service: Deactivated successfully. Jul 2 07:44:27.824740 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 07:44:27.824858 systemd[1]: session-7.scope: Consumed 3.892s CPU time. Jul 2 07:44:27.825138 kernel: audit: type=1104 audit(1719906267.814:814): pid=1339 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:44:27.825184 kernel: audit: type=1106 audit(1719906267.820:815): pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:27.820000 audit[1336]: USER_END pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:27.825571 systemd-logind[1189]: Removed session 7. Jul 2 07:44:27.820000 audit[1336]: CRED_DISP pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:27.833548 kernel: audit: type=1104 audit(1719906267.820:816): pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:27.833591 kernel: audit: type=1131 audit(1719906267.820:817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.39:22-10.0.0.1:54992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:27.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.39:22-10.0.0.1:54992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:29.056541 update_engine[1191]: I0702 07:44:29.056455 1191 update_attempter.cc:509] Updating boot flags... Jul 2 07:44:29.321709 kubelet[2039]: E0702 07:44:29.317281 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:29.331235 kubelet[2039]: I0702 07:44:29.331184 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=6.331120432 podStartE2EDuration="6.331120432s" podCreationTimestamp="2024-07-02 07:44:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:44:24.20028885 +0000 UTC m=+1.226741666" watchObservedRunningTime="2024-07-02 07:44:29.331120432 +0000 UTC m=+6.357573238" Jul 2 07:44:30.168981 kubelet[2039]: E0702 07:44:30.168948 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:33.132089 kubelet[2039]: E0702 07:44:33.132048 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:33.173104 kubelet[2039]: E0702 07:44:33.173074 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:34.174712 kubelet[2039]: E0702 07:44:34.174655 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:34.713912 kubelet[2039]: E0702 07:44:34.713881 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:38.840999 kubelet[2039]: I0702 07:44:38.840966 2039 topology_manager.go:215] "Topology Admit Handler" podUID="37d1ddf0-7fb0-472f-9a60-545acbdd1352" podNamespace="tigera-operator" podName="tigera-operator-76ff79f7fd-kzsqp" Jul 2 07:44:38.842480 kubelet[2039]: I0702 07:44:38.842449 2039 topology_manager.go:215] "Topology Admit Handler" podUID="ae34f34b-1771-4bc3-8de6-3a49e622f311" podNamespace="kube-system" podName="kube-proxy-8lqnp" Jul 2 07:44:38.845979 kubelet[2039]: W0702 07:44:38.845953 2039 reflector.go:547] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 2 07:44:38.846158 kubelet[2039]: E0702 07:44:38.846141 2039 reflector.go:150] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 2 07:44:38.849738 systemd[1]: Created slice kubepods-besteffort-pod37d1ddf0_7fb0_472f_9a60_545acbdd1352.slice. Jul 2 07:44:38.860457 systemd[1]: Created slice kubepods-besteffort-podae34f34b_1771_4bc3_8de6_3a49e622f311.slice. Jul 2 07:44:38.938606 kubelet[2039]: I0702 07:44:38.938561 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/37d1ddf0-7fb0-472f-9a60-545acbdd1352-var-lib-calico\") pod \"tigera-operator-76ff79f7fd-kzsqp\" (UID: \"37d1ddf0-7fb0-472f-9a60-545acbdd1352\") " pod="tigera-operator/tigera-operator-76ff79f7fd-kzsqp" Jul 2 07:44:38.938606 kubelet[2039]: I0702 07:44:38.938607 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h4zmp\" (UniqueName: \"kubernetes.io/projected/37d1ddf0-7fb0-472f-9a60-545acbdd1352-kube-api-access-h4zmp\") pod \"tigera-operator-76ff79f7fd-kzsqp\" (UID: \"37d1ddf0-7fb0-472f-9a60-545acbdd1352\") " pod="tigera-operator/tigera-operator-76ff79f7fd-kzsqp" Jul 2 07:44:38.938775 kubelet[2039]: I0702 07:44:38.938627 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/ae34f34b-1771-4bc3-8de6-3a49e622f311-kube-proxy\") pod \"kube-proxy-8lqnp\" (UID: \"ae34f34b-1771-4bc3-8de6-3a49e622f311\") " pod="kube-system/kube-proxy-8lqnp" Jul 2 07:44:38.938775 kubelet[2039]: I0702 07:44:38.938652 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ae34f34b-1771-4bc3-8de6-3a49e622f311-lib-modules\") pod \"kube-proxy-8lqnp\" (UID: \"ae34f34b-1771-4bc3-8de6-3a49e622f311\") " pod="kube-system/kube-proxy-8lqnp" Jul 2 07:44:38.938775 kubelet[2039]: I0702 07:44:38.938669 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tnj2g\" (UniqueName: \"kubernetes.io/projected/ae34f34b-1771-4bc3-8de6-3a49e622f311-kube-api-access-tnj2g\") pod \"kube-proxy-8lqnp\" (UID: \"ae34f34b-1771-4bc3-8de6-3a49e622f311\") " pod="kube-system/kube-proxy-8lqnp" Jul 2 07:44:38.938775 kubelet[2039]: I0702 07:44:38.938688 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ae34f34b-1771-4bc3-8de6-3a49e622f311-xtables-lock\") pod \"kube-proxy-8lqnp\" (UID: \"ae34f34b-1771-4bc3-8de6-3a49e622f311\") " pod="kube-system/kube-proxy-8lqnp" Jul 2 07:44:38.940973 kubelet[2039]: I0702 07:44:38.940956 2039 kuberuntime_manager.go:1523] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 07:44:38.941250 env[1197]: time="2024-07-02T07:44:38.941196740Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 07:44:38.941592 kubelet[2039]: I0702 07:44:38.941343 2039 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 07:44:39.159905 env[1197]: time="2024-07-02T07:44:39.159795033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76ff79f7fd-kzsqp,Uid:37d1ddf0-7fb0-472f-9a60-545acbdd1352,Namespace:tigera-operator,Attempt:0,}" Jul 2 07:44:39.176743 env[1197]: time="2024-07-02T07:44:39.176671762Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:44:39.176743 env[1197]: time="2024-07-02T07:44:39.176725153Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:44:39.176743 env[1197]: time="2024-07-02T07:44:39.176737276Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:44:39.176977 env[1197]: time="2024-07-02T07:44:39.176926663Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/02cd9e21902cb12792ff7e1ba6e685cd77bc894f13e5c95dbf37ed7f880a336f pid=2151 runtime=io.containerd.runc.v2 Jul 2 07:44:39.189714 systemd[1]: Started cri-containerd-02cd9e21902cb12792ff7e1ba6e685cd77bc894f13e5c95dbf37ed7f880a336f.scope. Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.213857 kernel: audit: type=1400 audit(1719906279.200:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.214018 kernel: audit: type=1400 audit(1719906279.200:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.214058 kernel: audit: type=1400 audit(1719906279.200:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.214082 kernel: audit: type=1400 audit(1719906279.200:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.217495 kernel: audit: type=1400 audit(1719906279.200:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.217554 kernel: audit: type=1400 audit(1719906279.200:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.223958 kernel: audit: type=1400 audit(1719906279.200:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.224049 kernel: audit: type=1400 audit(1719906279.200:825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.230633 kernel: audit: type=1400 audit(1719906279.200:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.230682 kernel: audit: type=1400 audit(1719906279.203:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.203000 audit: BPF prog-id=106 op=LOAD Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:39.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032636439653231393032636231323739326666376531626136653638 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:39.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032636439653231393032636231323739326666376531626136653638 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.204000 audit: BPF prog-id=107 op=LOAD Jul 2 07:44:39.204000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002afd10 items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:39.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032636439653231393032636231323739326666376531626136653638 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.207000 audit: BPF prog-id=108 op=LOAD Jul 2 07:44:39.207000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002afd58 items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:39.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032636439653231393032636231323739326666376531626136653638 Jul 2 07:44:39.210000 audit: BPF prog-id=108 op=UNLOAD Jul 2 07:44:39.210000 audit: BPF prog-id=107 op=UNLOAD Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:39.210000 audit: BPF prog-id=109 op=LOAD Jul 2 07:44:39.210000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000330168 items=0 ppid=2151 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:39.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032636439653231393032636231323739326666376531626136653638 Jul 2 07:44:39.244780 env[1197]: time="2024-07-02T07:44:39.244731032Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76ff79f7fd-kzsqp,Uid:37d1ddf0-7fb0-472f-9a60-545acbdd1352,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"02cd9e21902cb12792ff7e1ba6e685cd77bc894f13e5c95dbf37ed7f880a336f\"" Jul 2 07:44:39.246623 env[1197]: time="2024-07-02T07:44:39.246592749Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 07:44:40.063602 kubelet[2039]: E0702 07:44:40.063568 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:40.063952 env[1197]: time="2024-07-02T07:44:40.063860206Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8lqnp,Uid:ae34f34b-1771-4bc3-8de6-3a49e622f311,Namespace:kube-system,Attempt:0,}" Jul 2 07:44:40.086052 env[1197]: time="2024-07-02T07:44:40.085975631Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:44:40.086052 env[1197]: time="2024-07-02T07:44:40.086014063Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:44:40.086052 env[1197]: time="2024-07-02T07:44:40.086024052Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:44:40.086401 env[1197]: time="2024-07-02T07:44:40.086350720Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/638c591233ca8053d4d76e0e17a692e3e720e306687a308286dc09c0a1a18b9c pid=2192 runtime=io.containerd.runc.v2 Jul 2 07:44:40.098251 systemd[1]: run-containerd-runc-k8s.io-638c591233ca8053d4d76e0e17a692e3e720e306687a308286dc09c0a1a18b9c-runc.Gidlfj.mount: Deactivated successfully. Jul 2 07:44:40.100514 systemd[1]: Started cri-containerd-638c591233ca8053d4d76e0e17a692e3e720e306687a308286dc09c0a1a18b9c.scope. Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit: BPF prog-id=110 op=LOAD Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386335393132333363613830353364346437366530653137613639 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386335393132333363613830353364346437366530653137613639 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit: BPF prog-id=111 op=LOAD Jul 2 07:44:40.109000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0002516a0 items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386335393132333363613830353364346437366530653137613639 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.109000 audit: BPF prog-id=112 op=LOAD Jul 2 07:44:40.109000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0002516e8 items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386335393132333363613830353364346437366530653137613639 Jul 2 07:44:40.109000 audit: BPF prog-id=112 op=UNLOAD Jul 2 07:44:40.109000 audit: BPF prog-id=111 op=UNLOAD Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.110000 audit: BPF prog-id=113 op=LOAD Jul 2 07:44:40.110000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000251af8 items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633386335393132333363613830353364346437366530653137613639 Jul 2 07:44:40.119773 env[1197]: time="2024-07-02T07:44:40.119731356Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8lqnp,Uid:ae34f34b-1771-4bc3-8de6-3a49e622f311,Namespace:kube-system,Attempt:0,} returns sandbox id \"638c591233ca8053d4d76e0e17a692e3e720e306687a308286dc09c0a1a18b9c\"" Jul 2 07:44:40.120559 kubelet[2039]: E0702 07:44:40.120536 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:40.122448 env[1197]: time="2024-07-02T07:44:40.122417607Z" level=info msg="CreateContainer within sandbox \"638c591233ca8053d4d76e0e17a692e3e720e306687a308286dc09c0a1a18b9c\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 07:44:40.140300 env[1197]: time="2024-07-02T07:44:40.140260375Z" level=info msg="CreateContainer within sandbox \"638c591233ca8053d4d76e0e17a692e3e720e306687a308286dc09c0a1a18b9c\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"5bc065d45cd5413d7855382a8a5f4456cb14905ce396be1b3b60151dea5091e9\"" Jul 2 07:44:40.140887 env[1197]: time="2024-07-02T07:44:40.140843687Z" level=info msg="StartContainer for \"5bc065d45cd5413d7855382a8a5f4456cb14905ce396be1b3b60151dea5091e9\"" Jul 2 07:44:40.154824 systemd[1]: Started cri-containerd-5bc065d45cd5413d7855382a8a5f4456cb14905ce396be1b3b60151dea5091e9.scope. Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff64470c838 items=0 ppid=2192 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562633036356434356364353431336437383535333832613861356634 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit: BPF prog-id=114 op=LOAD Jul 2 07:44:40.168000 audit[2233]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00022bf18 items=0 ppid=2192 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562633036356434356364353431336437383535333832613861356634 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit: BPF prog-id=115 op=LOAD Jul 2 07:44:40.168000 audit[2233]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00022bf68 items=0 ppid=2192 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562633036356434356364353431336437383535333832613861356634 Jul 2 07:44:40.168000 audit: BPF prog-id=115 op=UNLOAD Jul 2 07:44:40.168000 audit: BPF prog-id=114 op=UNLOAD Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { perfmon } for pid=2233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit[2233]: AVC avc: denied { bpf } for pid=2233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:40.168000 audit: BPF prog-id=116 op=LOAD Jul 2 07:44:40.168000 audit[2233]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00022bff8 items=0 ppid=2192 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562633036356434356364353431336437383535333832613861356634 Jul 2 07:44:40.182626 env[1197]: time="2024-07-02T07:44:40.182591521Z" level=info msg="StartContainer for \"5bc065d45cd5413d7855382a8a5f4456cb14905ce396be1b3b60151dea5091e9\" returns successfully" Jul 2 07:44:40.186082 kubelet[2039]: E0702 07:44:40.185684 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:44:40.194931 kubelet[2039]: I0702 07:44:40.194874 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-8lqnp" podStartSLOduration=2.194854404 podStartE2EDuration="2.194854404s" podCreationTimestamp="2024-07-02 07:44:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:44:40.190966303 +0000 UTC m=+17.217419119" watchObservedRunningTime="2024-07-02 07:44:40.194854404 +0000 UTC m=+17.221307220" Jul 2 07:44:40.237000 audit[2286]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.237000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdeb09db50 a2=0 a3=7ffdeb09db3c items=0 ppid=2243 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:44:40.238000 audit[2287]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.238000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff699600a0 a2=0 a3=7fff6996008c items=0 ppid=2243 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.238000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:44:40.238000 audit[2288]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.238000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe7cdb2610 a2=0 a3=7ffe7cdb25fc items=0 ppid=2243 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.238000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:44:40.239000 audit[2289]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.239000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2fe165b0 a2=0 a3=7ffe2fe1659c items=0 ppid=2243 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:44:40.241000 audit[2290]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.241000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc08d7c1c0 a2=0 a3=7ffc08d7c1ac items=0 ppid=2243 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.241000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:44:40.242000 audit[2291]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.242000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc9632cf40 a2=0 a3=7ffc9632cf2c items=0 ppid=2243 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.242000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:44:40.293417 env[1197]: time="2024-07-02T07:44:40.293349713Z" level=error msg="PullImage \"quay.io/tigera/operator:v1.34.0\" failed" error="failed to pull and unpack image \"quay.io/tigera/operator:v1.34.0\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/quayio-production-s3/sha256/01/01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20240702%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240702T074440Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=45f6bec439bf44ca41ed17157c7efa77d98c95a47402423221836ce197753bbf&cf_sign=cOTCzIIldDGz0AHUbc1gCY%2F4wtrMX8CX15fq0D3ijgP6oGjVbhj%2Bf9FXkomb5rQlVOl9VeGHLWqduEzm2CYRm%2Bur%2BrM8gN21zO4WFG3Z7xCcWzIlb24JT9e0k510FsXGKoh%2B9VVlSXNRE69%2BvdUpogOabaCYK%2BtRJ%2FJ%2BbbA4rWZtmfQJBVUwhEDFB7C7HwG%2Fz%2BPFVeA3FzSp6dG%2BgKn826HrWursxl9DDGoB%2FLYtmzzvbBHay7cAATxg6i7P71BdJrxdO9%2FFgMg6oYKbpTsaonIiCUmZ2YvgB51EjLIfO3oG0bir5DiCZX8FVIMXs8giC32w5nJOnby8fLye%2BJmT0A%3D%3D&cf_expiry=1719906880®ion=us-east-1&namespace=tigera&repo_name=operator\": dial tcp: lookup cdn03.quay.io: no such host" Jul 2 07:44:40.293602 kubelet[2039]: E0702 07:44:40.293563 2039 remote_image.go:180] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/tigera/operator:v1.34.0\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/quayio-production-s3/sha256/01/01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20240702%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240702T074440Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=45f6bec439bf44ca41ed17157c7efa77d98c95a47402423221836ce197753bbf&cf_sign=cOTCzIIldDGz0AHUbc1gCY%2F4wtrMX8CX15fq0D3ijgP6oGjVbhj%2Bf9FXkomb5rQlVOl9VeGHLWqduEzm2CYRm%2Bur%2BrM8gN21zO4WFG3Z7xCcWzIlb24JT9e0k510FsXGKoh%2B9VVlSXNRE69%2BvdUpogOabaCYK%2BtRJ%2FJ%2BbbA4rWZtmfQJBVUwhEDFB7C7HwG%2Fz%2BPFVeA3FzSp6dG%2BgKn826HrWursxl9DDGoB%2FLYtmzzvbBHay7cAATxg6i7P71BdJrxdO9%2FFgMg6oYKbpTsaonIiCUmZ2YvgB51EjLIfO3oG0bir5DiCZX8FVIMXs8giC32w5nJOnby8fLye%2BJmT0A%3D%3D&cf_expiry=1719906880®ion=us-east-1&namespace=tigera&repo_name=operator\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/tigera/operator:v1.34.0" Jul 2 07:44:40.293672 kubelet[2039]: E0702 07:44:40.293611 2039 kuberuntime_image.go:55] "Failed to pull image" err="failed to pull and unpack image \"quay.io/tigera/operator:v1.34.0\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/quayio-production-s3/sha256/01/01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20240702%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240702T074440Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=45f6bec439bf44ca41ed17157c7efa77d98c95a47402423221836ce197753bbf&cf_sign=cOTCzIIldDGz0AHUbc1gCY%2F4wtrMX8CX15fq0D3ijgP6oGjVbhj%2Bf9FXkomb5rQlVOl9VeGHLWqduEzm2CYRm%2Bur%2BrM8gN21zO4WFG3Z7xCcWzIlb24JT9e0k510FsXGKoh%2B9VVlSXNRE69%2BvdUpogOabaCYK%2BtRJ%2FJ%2BbbA4rWZtmfQJBVUwhEDFB7C7HwG%2Fz%2BPFVeA3FzSp6dG%2BgKn826HrWursxl9DDGoB%2FLYtmzzvbBHay7cAATxg6i7P71BdJrxdO9%2FFgMg6oYKbpTsaonIiCUmZ2YvgB51EjLIfO3oG0bir5DiCZX8FVIMXs8giC32w5nJOnby8fLye%2BJmT0A%3D%3D&cf_expiry=1719906880®ion=us-east-1&namespace=tigera&repo_name=operator\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/tigera/operator:v1.34.0" Jul 2 07:44:40.293770 kubelet[2039]: E0702 07:44:40.293729 2039 kuberuntime_manager.go:1256] container &Container{Name:tigera-operator,Image:quay.io/tigera/operator:v1.34.0,Command:[operator],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:WATCH_NAMESPACE,Value:,ValueFrom:nil,},EnvVar{Name:POD_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.name,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:OPERATOR_NAME,Value:tigera-operator,ValueFrom:nil,},EnvVar{Name:TIGERA_OPERATOR_INIT_IMAGE_VERSION,Value:v1.34.0,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:var-lib-calico,ReadOnly:true,MountPath:/var/lib/calico,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-h4zmp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{EnvFromSource{Prefix:,ConfigMapRef:&ConfigMapEnvSource{LocalObjectReference:LocalObjectReference{Name:kubernetes-services-endpoint,},Optional:*true,},SecretRef:nil,},},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod tigera-operator-76ff79f7fd-kzsqp_tigera-operator(37d1ddf0-7fb0-472f-9a60-545acbdd1352): ErrImagePull: failed to pull and unpack image "quay.io/tigera/operator:v1.34.0": failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://cdn03.quay.io/quayio-production-s3/sha256/01/01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20240702%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240702T074440Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=45f6bec439bf44ca41ed17157c7efa77d98c95a47402423221836ce197753bbf&cf_sign=cOTCzIIldDGz0AHUbc1gCY%2F4wtrMX8CX15fq0D3ijgP6oGjVbhj%2Bf9FXkomb5rQlVOl9VeGHLWqduEzm2CYRm%2Bur%2BrM8gN21zO4WFG3Z7xCcWzIlb24JT9e0k510FsXGKoh%2B9VVlSXNRE69%2BvdUpogOabaCYK%2BtRJ%2FJ%2BbbA4rWZtmfQJBVUwhEDFB7C7HwG%2Fz%2BPFVeA3FzSp6dG%2BgKn826HrWursxl9DDGoB%2FLYtmzzvbBHay7cAATxg6i7P71BdJrxdO9%2FFgMg6oYKbpTsaonIiCUmZ2YvgB51EjLIfO3oG0bir5DiCZX8FVIMXs8giC32w5nJOnby8fLye%2BJmT0A%3D%3D&cf_expiry=1719906880®ion=us-east-1&namespace=tigera&repo_name=operator": dial tcp: lookup cdn03.quay.io: no such host Jul 2 07:44:40.293879 kubelet[2039]: E0702 07:44:40.293761 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with ErrImagePull: \"failed to pull and unpack image \\\"quay.io/tigera/operator:v1.34.0\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn03.quay.io/quayio-production-s3/sha256/01/01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20240702%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240702T074440Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=45f6bec439bf44ca41ed17157c7efa77d98c95a47402423221836ce197753bbf&cf_sign=cOTCzIIldDGz0AHUbc1gCY%2F4wtrMX8CX15fq0D3ijgP6oGjVbhj%2Bf9FXkomb5rQlVOl9VeGHLWqduEzm2CYRm%2Bur%2BrM8gN21zO4WFG3Z7xCcWzIlb24JT9e0k510FsXGKoh%2B9VVlSXNRE69%2BvdUpogOabaCYK%2BtRJ%2FJ%2BbbA4rWZtmfQJBVUwhEDFB7C7HwG%2Fz%2BPFVeA3FzSp6dG%2BgKn826HrWursxl9DDGoB%2FLYtmzzvbBHay7cAATxg6i7P71BdJrxdO9%2FFgMg6oYKbpTsaonIiCUmZ2YvgB51EjLIfO3oG0bir5DiCZX8FVIMXs8giC32w5nJOnby8fLye%2BJmT0A%3D%3D&cf_expiry=1719906880®ion=us-east-1&namespace=tigera&repo_name=operator\\\": dial tcp: lookup cdn03.quay.io: no such host\"" pod="tigera-operator/tigera-operator-76ff79f7fd-kzsqp" podUID="37d1ddf0-7fb0-472f-9a60-545acbdd1352" Jul 2 07:44:40.339000 audit[2292]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.339000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc2e79c940 a2=0 a3=7ffc2e79c92c items=0 ppid=2243 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:44:40.342000 audit[2294]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.342000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcb29c34b0 a2=0 a3=7ffcb29c349c items=0 ppid=2243 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.342000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 07:44:40.345000 audit[2297]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.345000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd6f0255f0 a2=0 a3=7ffd6f0255dc items=0 ppid=2243 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.345000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 07:44:40.346000 audit[2298]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.346000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd1e700520 a2=0 a3=7ffd1e70050c items=0 ppid=2243 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.346000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:44:40.348000 audit[2300]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.348000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffe305de70 a2=0 a3=7fffe305de5c items=0 ppid=2243 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.348000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:44:40.349000 audit[2301]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.349000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb828b070 a2=0 a3=7ffcb828b05c items=0 ppid=2243 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:44:40.351000 audit[2303]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2303 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.351000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcff62dce0 a2=0 a3=7ffcff62dccc items=0 ppid=2243 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.351000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:44:40.354000 audit[2306]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.354000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff7d717c30 a2=0 a3=7fff7d717c1c items=0 ppid=2243 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.354000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 07:44:40.355000 audit[2307]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.355000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff5878a50 a2=0 a3=7ffff5878a3c items=0 ppid=2243 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:44:40.357000 audit[2309]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.357000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe585b91f0 a2=0 a3=7ffe585b91dc items=0 ppid=2243 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.357000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:44:40.357000 audit[2310]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.357000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda262ff50 a2=0 a3=7ffda262ff3c items=0 ppid=2243 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.357000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:44:40.359000 audit[2312]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.359000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff1f41a800 a2=0 a3=7fff1f41a7ec items=0 ppid=2243 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.359000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:44:40.362000 audit[2315]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.362000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd380ce9a0 a2=0 a3=7ffd380ce98c items=0 ppid=2243 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.362000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:44:40.365000 audit[2318]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.365000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe66355570 a2=0 a3=7ffe6635555c items=0 ppid=2243 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.365000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:44:40.367000 audit[2319]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.367000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe3296c990 a2=0 a3=7ffe3296c97c items=0 ppid=2243 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.367000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:44:40.368000 audit[2321]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.368000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc8d3acd00 a2=0 a3=7ffc8d3accec items=0 ppid=2243 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.368000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:44:40.371000 audit[2324]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.371000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffce71a96c0 a2=0 a3=7ffce71a96ac items=0 ppid=2243 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.371000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:44:40.372000 audit[2325]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.372000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc701a260 a2=0 a3=7ffcc701a24c items=0 ppid=2243 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.372000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:44:40.374000 audit[2327]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:44:40.374000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc45045c90 a2=0 a3=7ffc45045c7c items=0 ppid=2243 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.374000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:44:40.392000 audit[2333]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:44:40.392000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd4ae70590 a2=0 a3=7ffd4ae7057c items=0 ppid=2243 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:44:40.401000 audit[2333]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:44:40.401000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd4ae70590 a2=0 a3=7ffd4ae7057c items=0 ppid=2243 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.401000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:44:40.403000 audit[2339]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.403000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdf675a340 a2=0 a3=7ffdf675a32c items=0 ppid=2243 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:44:40.405000 audit[2341]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.405000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffed32096f0 a2=0 a3=7ffed32096dc items=0 ppid=2243 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 07:44:40.408000 audit[2344]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.408000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe093058f0 a2=0 a3=7ffe093058dc items=0 ppid=2243 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.408000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 07:44:40.409000 audit[2345]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.409000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc42ded840 a2=0 a3=7ffc42ded82c items=0 ppid=2243 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:44:40.411000 audit[2347]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.411000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc1565e610 a2=0 a3=7ffc1565e5fc items=0 ppid=2243 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.411000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:44:40.412000 audit[2348]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.412000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed1b8c0a0 a2=0 a3=7ffed1b8c08c items=0 ppid=2243 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:44:40.414000 audit[2350]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.414000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffee62e1170 a2=0 a3=7ffee62e115c items=0 ppid=2243 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.414000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 07:44:40.416000 audit[2353]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.416000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd636aee80 a2=0 a3=7ffd636aee6c items=0 ppid=2243 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.416000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:44:40.417000 audit[2354]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.417000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf79287f0 a2=0 a3=7ffcf79287dc items=0 ppid=2243 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:44:40.419000 audit[2356]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.419000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffbaf86fa0 a2=0 a3=7fffbaf86f8c items=0 ppid=2243 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.419000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:44:40.420000 audit[2357]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.420000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcd81ac960 a2=0 a3=7ffcd81ac94c items=0 ppid=2243 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:44:40.422000 audit[2359]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.422000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea0fa46f0 a2=0 a3=7ffea0fa46dc items=0 ppid=2243 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:44:40.425000 audit[2362]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.425000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffba186d90 a2=0 a3=7fffba186d7c items=0 ppid=2243 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:44:40.427000 audit[2365]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.427000 audit[2365]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd693f4d50 a2=0 a3=7ffd693f4d3c items=0 ppid=2243 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.427000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 07:44:40.428000 audit[2366]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.428000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc204360f0 a2=0 a3=7ffc204360dc items=0 ppid=2243 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:44:40.430000 audit[2368]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.430000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe159637b0 a2=0 a3=7ffe1596379c items=0 ppid=2243 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.430000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:44:40.433000 audit[2371]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.433000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe03e20dc0 a2=0 a3=7ffe03e20dac items=0 ppid=2243 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:44:40.433000 audit[2372]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.433000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd940628c0 a2=0 a3=7ffd940628ac items=0 ppid=2243 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:44:40.435000 audit[2374]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.435000 audit[2374]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff748e0210 a2=0 a3=7fff748e01fc items=0 ppid=2243 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.435000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:44:40.436000 audit[2375]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.436000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc50089ac0 a2=0 a3=7ffc50089aac items=0 ppid=2243 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.436000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:44:40.438000 audit[2377]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.438000 audit[2377]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd30d9a310 a2=0 a3=7ffd30d9a2fc items=0 ppid=2243 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.438000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:44:40.440000 audit[2380]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:44:40.440000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffe0e08530 a2=0 a3=7fffe0e0851c items=0 ppid=2243 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:44:40.443000 audit[2382]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:44:40.443000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7ffc9b6c5e30 a2=0 a3=7ffc9b6c5e1c items=0 ppid=2243 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.443000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:44:40.443000 audit[2382]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:44:40.443000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc9b6c5e30 a2=0 a3=7ffc9b6c5e1c items=0 ppid=2243 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:40.443000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:44:41.187127 kubelet[2039]: E0702 07:44:41.187081 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/tigera/operator:v1.34.0\\\"\"" pod="tigera-operator/tigera-operator-76ff79f7fd-kzsqp" podUID="37d1ddf0-7fb0-472f-9a60-545acbdd1352" Jul 2 07:44:50.377981 systemd[1]: Started sshd@7-10.0.0.39:22-10.0.0.1:38312.service. Jul 2 07:44:50.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.39:22-10.0.0.1:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:50.379078 kernel: kauditd_printk_skb: 300 callbacks suppressed Jul 2 07:44:50.379125 kernel: audit: type=1130 audit(1719906290.377:911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.39:22-10.0.0.1:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:50.408000 audit[2385]: USER_ACCT pid=2385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.409524 sshd[2385]: Accepted publickey for core from 10.0.0.1 port 38312 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:44:50.413000 audit[2385]: CRED_ACQ pid=2385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.414207 sshd[2385]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:44:50.418878 kernel: audit: type=1101 audit(1719906290.408:912): pid=2385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.418932 kernel: audit: type=1103 audit(1719906290.413:913): pid=2385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.419298 systemd[1]: Started session-8.scope. Jul 2 07:44:50.419697 systemd-logind[1189]: New session 8 of user core. Jul 2 07:44:50.421857 kernel: audit: type=1006 audit(1719906290.413:914): pid=2385 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 2 07:44:50.421902 kernel: audit: type=1300 audit(1719906290.413:914): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc4e35cd0 a2=3 a3=0 items=0 ppid=1 pid=2385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:50.413000 audit[2385]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc4e35cd0 a2=3 a3=0 items=0 ppid=1 pid=2385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:50.413000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:44:50.427763 kernel: audit: type=1327 audit(1719906290.413:914): proctitle=737368643A20636F7265205B707269765D Jul 2 07:44:50.427801 kernel: audit: type=1105 audit(1719906290.423:915): pid=2385 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.423000 audit[2385]: USER_START pid=2385 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.424000 audit[2387]: CRED_ACQ pid=2387 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.435814 kernel: audit: type=1103 audit(1719906290.424:916): pid=2387 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.528139 sshd[2385]: pam_unix(sshd:session): session closed for user core Jul 2 07:44:50.528000 audit[2385]: USER_END pid=2385 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.530083 systemd[1]: sshd@7-10.0.0.39:22-10.0.0.1:38312.service: Deactivated successfully. Jul 2 07:44:50.530686 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 07:44:50.531212 systemd-logind[1189]: Session 8 logged out. Waiting for processes to exit. Jul 2 07:44:50.531803 systemd-logind[1189]: Removed session 8. Jul 2 07:44:50.528000 audit[2385]: CRED_DISP pid=2385 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.537239 kernel: audit: type=1106 audit(1719906290.528:917): pid=2385 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.537293 kernel: audit: type=1104 audit(1719906290.528:918): pid=2385 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:50.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.39:22-10.0.0.1:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:55.149668 env[1197]: time="2024-07-02T07:44:55.149587969Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 07:44:55.531946 systemd[1]: Started sshd@8-10.0.0.39:22-10.0.0.1:42316.service. Jul 2 07:44:55.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.39:22-10.0.0.1:42316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:55.532858 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:44:55.532906 kernel: audit: type=1130 audit(1719906295.531:920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.39:22-10.0.0.1:42316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:55.561000 audit[2399]: USER_ACCT pid=2399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.562305 sshd[2399]: Accepted publickey for core from 10.0.0.1 port 42316 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:44:55.563936 sshd[2399]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:44:55.563000 audit[2399]: CRED_ACQ pid=2399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.566994 systemd-logind[1189]: New session 9 of user core. Jul 2 07:44:55.567662 systemd[1]: Started session-9.scope. Jul 2 07:44:55.569757 kernel: audit: type=1101 audit(1719906295.561:921): pid=2399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.569810 kernel: audit: type=1103 audit(1719906295.563:922): pid=2399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.569830 kernel: audit: type=1006 audit(1719906295.563:923): pid=2399 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 2 07:44:55.572500 kernel: audit: type=1300 audit(1719906295.563:923): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6c157f50 a2=3 a3=0 items=0 ppid=1 pid=2399 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:55.563000 audit[2399]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6c157f50 a2=3 a3=0 items=0 ppid=1 pid=2399 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:55.563000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:44:55.577327 kernel: audit: type=1327 audit(1719906295.563:923): proctitle=737368643A20636F7265205B707269765D Jul 2 07:44:55.577356 kernel: audit: type=1105 audit(1719906295.570:924): pid=2399 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.570000 audit[2399]: USER_START pid=2399 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.571000 audit[2401]: CRED_ACQ pid=2401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.585060 kernel: audit: type=1103 audit(1719906295.571:925): pid=2401 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.661642 sshd[2399]: pam_unix(sshd:session): session closed for user core Jul 2 07:44:55.662000 audit[2399]: USER_END pid=2399 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.663918 systemd[1]: sshd@8-10.0.0.39:22-10.0.0.1:42316.service: Deactivated successfully. Jul 2 07:44:55.664585 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 07:44:55.665079 systemd-logind[1189]: Session 9 logged out. Waiting for processes to exit. Jul 2 07:44:55.665717 systemd-logind[1189]: Removed session 9. Jul 2 07:44:55.662000 audit[2399]: CRED_DISP pid=2399 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.670179 kernel: audit: type=1106 audit(1719906295.662:926): pid=2399 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.670226 kernel: audit: type=1104 audit(1719906295.662:927): pid=2399 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:44:55.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.39:22-10.0.0.1:42316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:44:56.442967 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2943889256.mount: Deactivated successfully. Jul 2 07:44:58.080488 env[1197]: time="2024-07-02T07:44:58.080435735Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:58.082318 env[1197]: time="2024-07-02T07:44:58.082281103Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:58.084080 env[1197]: time="2024-07-02T07:44:58.084042814Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:58.085462 env[1197]: time="2024-07-02T07:44:58.085417728Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:44:58.085909 env[1197]: time="2024-07-02T07:44:58.085875678Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d\"" Jul 2 07:44:58.087693 env[1197]: time="2024-07-02T07:44:58.087669499Z" level=info msg="CreateContainer within sandbox \"02cd9e21902cb12792ff7e1ba6e685cd77bc894f13e5c95dbf37ed7f880a336f\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 07:44:58.099810 env[1197]: time="2024-07-02T07:44:58.099760572Z" level=info msg="CreateContainer within sandbox \"02cd9e21902cb12792ff7e1ba6e685cd77bc894f13e5c95dbf37ed7f880a336f\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"661a7d97b2a7c451f910af0ffd43f42130f6690c419dd2c4123e2a01138d9bbb\"" Jul 2 07:44:58.100102 env[1197]: time="2024-07-02T07:44:58.100071918Z" level=info msg="StartContainer for \"661a7d97b2a7c451f910af0ffd43f42130f6690c419dd2c4123e2a01138d9bbb\"" Jul 2 07:44:58.117523 systemd[1]: Started cri-containerd-661a7d97b2a7c451f910af0ffd43f42130f6690c419dd2c4123e2a01138d9bbb.scope. Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit: BPF prog-id=117 op=LOAD Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2151 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:58.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316137643937623261376334353166393130616630666664343366 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2151 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:58.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316137643937623261376334353166393130616630666664343366 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.132000 audit: BPF prog-id=118 op=LOAD Jul 2 07:44:58.132000 audit[2419]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00037ea90 items=0 ppid=2151 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:58.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316137643937623261376334353166393130616630666664343366 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit: BPF prog-id=119 op=LOAD Jul 2 07:44:58.133000 audit[2419]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00037ead8 items=0 ppid=2151 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:58.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316137643937623261376334353166393130616630666664343366 Jul 2 07:44:58.133000 audit: BPF prog-id=119 op=UNLOAD Jul 2 07:44:58.133000 audit: BPF prog-id=118 op=UNLOAD Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { perfmon } for pid=2419 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit[2419]: AVC avc: denied { bpf } for pid=2419 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:44:58.133000 audit: BPF prog-id=120 op=LOAD Jul 2 07:44:58.133000 audit[2419]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00037eee8 items=0 ppid=2151 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:44:58.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316137643937623261376334353166393130616630666664343366 Jul 2 07:44:58.239258 env[1197]: time="2024-07-02T07:44:58.239192112Z" level=info msg="StartContainer for \"661a7d97b2a7c451f910af0ffd43f42130f6690c419dd2c4123e2a01138d9bbb\" returns successfully" Jul 2 07:44:59.097029 systemd[1]: run-containerd-runc-k8s.io-661a7d97b2a7c451f910af0ffd43f42130f6690c419dd2c4123e2a01138d9bbb-runc.jXa8D5.mount: Deactivated successfully. Jul 2 07:44:59.249007 kubelet[2039]: I0702 07:44:59.248926 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76ff79f7fd-kzsqp" podStartSLOduration=2.407997737 podStartE2EDuration="21.248904527s" podCreationTimestamp="2024-07-02 07:44:38 +0000 UTC" firstStartedPulling="2024-07-02 07:44:39.245778069 +0000 UTC m=+16.272230885" lastFinishedPulling="2024-07-02 07:44:58.086684859 +0000 UTC m=+35.113137675" observedRunningTime="2024-07-02 07:44:59.2486082 +0000 UTC m=+36.275061016" watchObservedRunningTime="2024-07-02 07:44:59.248904527 +0000 UTC m=+36.275357343" Jul 2 07:45:00.672858 kernel: kauditd_printk_skb: 58 callbacks suppressed Jul 2 07:45:00.673010 kernel: audit: type=1130 audit(1719906300.666:947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.39:22-10.0.0.1:42330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:00.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.39:22-10.0.0.1:42330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:00.666384 systemd[1]: Started sshd@9-10.0.0.39:22-10.0.0.1:42330.service. Jul 2 07:45:00.710000 audit[2455]: USER_ACCT pid=2455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.713721 sshd[2455]: Accepted publickey for core from 10.0.0.1 port 42330 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:00.715494 kernel: audit: type=1101 audit(1719906300.710:948): pid=2455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.715000 audit[2455]: CRED_ACQ pid=2455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.719667 sshd[2455]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:00.721903 kernel: audit: type=1103 audit(1719906300.715:949): pid=2455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.721950 kernel: audit: type=1006 audit(1719906300.715:950): pid=2455 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 2 07:45:00.726299 kernel: audit: type=1300 audit(1719906300.715:950): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd66e2e780 a2=3 a3=0 items=0 ppid=1 pid=2455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:00.715000 audit[2455]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd66e2e780 a2=3 a3=0 items=0 ppid=1 pid=2455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:00.725721 systemd-logind[1189]: New session 10 of user core. Jul 2 07:45:00.726391 systemd[1]: Started session-10.scope. Jul 2 07:45:00.715000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:00.728479 kernel: audit: type=1327 audit(1719906300.715:950): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:00.731000 audit[2455]: USER_START pid=2455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.735000 audit[2457]: CRED_ACQ pid=2457 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.739726 kernel: audit: type=1105 audit(1719906300.731:951): pid=2455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.739766 kernel: audit: type=1103 audit(1719906300.735:952): pid=2457 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.826933 sshd[2455]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:00.836599 kernel: audit: type=1106 audit(1719906300.827:953): pid=2455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.836669 kernel: audit: type=1104 audit(1719906300.827:954): pid=2455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.827000 audit[2455]: USER_END pid=2455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.827000 audit[2455]: CRED_DISP pid=2455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:00.835751 systemd[1]: sshd@9-10.0.0.39:22-10.0.0.1:42330.service: Deactivated successfully. Jul 2 07:45:00.836327 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 07:45:00.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.39:22-10.0.0.1:42330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:00.836997 systemd-logind[1189]: Session 10 logged out. Waiting for processes to exit. Jul 2 07:45:00.837596 systemd-logind[1189]: Removed session 10. Jul 2 07:45:00.975000 audit[2470]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:00.975000 audit[2470]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fffb40624c0 a2=0 a3=7fffb40624ac items=0 ppid=2243 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:00.975000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:00.976000 audit[2470]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:00.976000 audit[2470]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb40624c0 a2=0 a3=0 items=0 ppid=2243 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:00.976000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:00.986000 audit[2472]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:00.986000 audit[2472]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd719b17f0 a2=0 a3=7ffd719b17dc items=0 ppid=2243 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:00.986000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:00.994000 audit[2472]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:00.994000 audit[2472]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd719b17f0 a2=0 a3=0 items=0 ppid=2243 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:00.994000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:01.127923 kubelet[2039]: I0702 07:45:01.127874 2039 topology_manager.go:215] "Topology Admit Handler" podUID="fc2f929a-e0f6-42c2-9152-9d24d4ebf886" podNamespace="calico-system" podName="calico-node-bwr2p" Jul 2 07:45:01.132861 systemd[1]: Created slice kubepods-besteffort-podfc2f929a_e0f6_42c2_9152_9d24d4ebf886.slice. Jul 2 07:45:01.185498 kubelet[2039]: I0702 07:45:01.185439 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-lib-modules\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185498 kubelet[2039]: I0702 07:45:01.185497 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-cni-bin-dir\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185697 kubelet[2039]: I0702 07:45:01.185545 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-policysync\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185697 kubelet[2039]: I0702 07:45:01.185565 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-xtables-lock\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185697 kubelet[2039]: I0702 07:45:01.185578 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-node-certs\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185697 kubelet[2039]: I0702 07:45:01.185593 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6dr55\" (UniqueName: \"kubernetes.io/projected/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-kube-api-access-6dr55\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185697 kubelet[2039]: I0702 07:45:01.185613 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-tigera-ca-bundle\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185697 kubelet[2039]: I0702 07:45:01.185640 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-var-run-calico\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185697 kubelet[2039]: I0702 07:45:01.185682 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-cni-net-dir\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185869 kubelet[2039]: I0702 07:45:01.185710 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-var-lib-calico\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185869 kubelet[2039]: I0702 07:45:01.185723 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-cni-log-dir\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.185869 kubelet[2039]: I0702 07:45:01.185737 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/fc2f929a-e0f6-42c2-9152-9d24d4ebf886-flexvol-driver-host\") pod \"calico-node-bwr2p\" (UID: \"fc2f929a-e0f6-42c2-9152-9d24d4ebf886\") " pod="calico-system/calico-node-bwr2p" Jul 2 07:45:01.242055 kubelet[2039]: I0702 07:45:01.241933 2039 topology_manager.go:215] "Topology Admit Handler" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" podNamespace="calico-system" podName="csi-node-driver-zjz6j" Jul 2 07:45:01.242210 kubelet[2039]: E0702 07:45:01.242161 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:01.286458 kubelet[2039]: I0702 07:45:01.286410 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/cc8c263d-ad60-4d91-90ca-67fb1e4a4afa-varrun\") pod \"csi-node-driver-zjz6j\" (UID: \"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa\") " pod="calico-system/csi-node-driver-zjz6j" Jul 2 07:45:01.286458 kubelet[2039]: I0702 07:45:01.286504 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/cc8c263d-ad60-4d91-90ca-67fb1e4a4afa-socket-dir\") pod \"csi-node-driver-zjz6j\" (UID: \"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa\") " pod="calico-system/csi-node-driver-zjz6j" Jul 2 07:45:01.286707 kubelet[2039]: I0702 07:45:01.286533 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/cc8c263d-ad60-4d91-90ca-67fb1e4a4afa-registration-dir\") pod \"csi-node-driver-zjz6j\" (UID: \"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa\") " pod="calico-system/csi-node-driver-zjz6j" Jul 2 07:45:01.286707 kubelet[2039]: I0702 07:45:01.286548 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b2zbz\" (UniqueName: \"kubernetes.io/projected/cc8c263d-ad60-4d91-90ca-67fb1e4a4afa-kube-api-access-b2zbz\") pod \"csi-node-driver-zjz6j\" (UID: \"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa\") " pod="calico-system/csi-node-driver-zjz6j" Jul 2 07:45:01.286707 kubelet[2039]: I0702 07:45:01.286575 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/cc8c263d-ad60-4d91-90ca-67fb1e4a4afa-kubelet-dir\") pod \"csi-node-driver-zjz6j\" (UID: \"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa\") " pod="calico-system/csi-node-driver-zjz6j" Jul 2 07:45:01.293160 kubelet[2039]: E0702 07:45:01.293110 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.293160 kubelet[2039]: W0702 07:45:01.293135 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.293160 kubelet[2039]: E0702 07:45:01.293158 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.297593 kubelet[2039]: E0702 07:45:01.297555 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.297593 kubelet[2039]: W0702 07:45:01.297580 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.297836 kubelet[2039]: E0702 07:45:01.297603 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.387686 kubelet[2039]: E0702 07:45:01.387657 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.387686 kubelet[2039]: W0702 07:45:01.387680 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.387882 kubelet[2039]: E0702 07:45:01.387701 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.388042 kubelet[2039]: E0702 07:45:01.388026 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.388042 kubelet[2039]: W0702 07:45:01.388038 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.388127 kubelet[2039]: E0702 07:45:01.388052 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.388311 kubelet[2039]: E0702 07:45:01.388283 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.388311 kubelet[2039]: W0702 07:45:01.388298 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.388311 kubelet[2039]: E0702 07:45:01.388314 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.388591 kubelet[2039]: E0702 07:45:01.388537 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.388591 kubelet[2039]: W0702 07:45:01.388548 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.388591 kubelet[2039]: E0702 07:45:01.388577 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.388818 kubelet[2039]: E0702 07:45:01.388800 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.388818 kubelet[2039]: W0702 07:45:01.388812 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.388904 kubelet[2039]: E0702 07:45:01.388823 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.389013 kubelet[2039]: E0702 07:45:01.388997 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.389013 kubelet[2039]: W0702 07:45:01.389007 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.389100 kubelet[2039]: E0702 07:45:01.389047 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.389148 kubelet[2039]: E0702 07:45:01.389133 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.389148 kubelet[2039]: W0702 07:45:01.389144 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.389231 kubelet[2039]: E0702 07:45:01.389191 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.389372 kubelet[2039]: E0702 07:45:01.389351 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.389372 kubelet[2039]: W0702 07:45:01.389368 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.389482 kubelet[2039]: E0702 07:45:01.389409 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.389660 kubelet[2039]: E0702 07:45:01.389642 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.389660 kubelet[2039]: W0702 07:45:01.389654 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.389756 kubelet[2039]: E0702 07:45:01.389669 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.389824 kubelet[2039]: E0702 07:45:01.389807 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.389868 kubelet[2039]: W0702 07:45:01.389830 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.389868 kubelet[2039]: E0702 07:45:01.389844 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.390026 kubelet[2039]: E0702 07:45:01.390010 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.390026 kubelet[2039]: W0702 07:45:01.390023 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.390103 kubelet[2039]: E0702 07:45:01.390071 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.390214 kubelet[2039]: E0702 07:45:01.390197 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.390214 kubelet[2039]: W0702 07:45:01.390211 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.390280 kubelet[2039]: E0702 07:45:01.390256 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.390372 kubelet[2039]: E0702 07:45:01.390358 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.390372 kubelet[2039]: W0702 07:45:01.390368 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.390450 kubelet[2039]: E0702 07:45:01.390393 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.390622 kubelet[2039]: E0702 07:45:01.390607 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.390622 kubelet[2039]: W0702 07:45:01.390617 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.390692 kubelet[2039]: E0702 07:45:01.390656 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.390761 kubelet[2039]: E0702 07:45:01.390742 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.390812 kubelet[2039]: W0702 07:45:01.390769 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.390862 kubelet[2039]: E0702 07:45:01.390846 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.390946 kubelet[2039]: E0702 07:45:01.390934 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.390946 kubelet[2039]: W0702 07:45:01.390944 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.390993 kubelet[2039]: E0702 07:45:01.390956 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.391118 kubelet[2039]: E0702 07:45:01.391100 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.391118 kubelet[2039]: W0702 07:45:01.391113 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.391207 kubelet[2039]: E0702 07:45:01.391127 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.391262 kubelet[2039]: E0702 07:45:01.391246 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.391262 kubelet[2039]: W0702 07:45:01.391257 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.391346 kubelet[2039]: E0702 07:45:01.391280 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.391599 kubelet[2039]: E0702 07:45:01.391581 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.391599 kubelet[2039]: W0702 07:45:01.391593 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.391686 kubelet[2039]: E0702 07:45:01.391608 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.391813 kubelet[2039]: E0702 07:45:01.391801 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.391870 kubelet[2039]: W0702 07:45:01.391813 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.391894 kubelet[2039]: E0702 07:45:01.391884 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.392041 kubelet[2039]: E0702 07:45:01.392019 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.392041 kubelet[2039]: W0702 07:45:01.392034 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.392117 kubelet[2039]: E0702 07:45:01.392086 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.392256 kubelet[2039]: E0702 07:45:01.392234 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.392256 kubelet[2039]: W0702 07:45:01.392251 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.392330 kubelet[2039]: E0702 07:45:01.392295 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.392489 kubelet[2039]: E0702 07:45:01.392449 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.392557 kubelet[2039]: W0702 07:45:01.392516 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.392557 kubelet[2039]: E0702 07:45:01.392540 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.392787 kubelet[2039]: E0702 07:45:01.392757 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.392859 kubelet[2039]: W0702 07:45:01.392786 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.392859 kubelet[2039]: E0702 07:45:01.392808 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.393074 kubelet[2039]: E0702 07:45:01.393050 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.393074 kubelet[2039]: W0702 07:45:01.393066 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.393074 kubelet[2039]: E0702 07:45:01.393075 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.404793 kubelet[2039]: E0702 07:45:01.404750 2039 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:45:01.404793 kubelet[2039]: W0702 07:45:01.404773 2039 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:45:01.404793 kubelet[2039]: E0702 07:45:01.404796 2039 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:45:01.436035 kubelet[2039]: E0702 07:45:01.435994 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:01.436957 env[1197]: time="2024-07-02T07:45:01.436908960Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-bwr2p,Uid:fc2f929a-e0f6-42c2-9152-9d24d4ebf886,Namespace:calico-system,Attempt:0,}" Jul 2 07:45:01.529925 env[1197]: time="2024-07-02T07:45:01.529742400Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:45:01.529925 env[1197]: time="2024-07-02T07:45:01.529856144Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:45:01.529925 env[1197]: time="2024-07-02T07:45:01.529886561Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:45:01.530908 env[1197]: time="2024-07-02T07:45:01.530754091Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b pid=2511 runtime=io.containerd.runc.v2 Jul 2 07:45:01.545082 systemd[1]: Started cri-containerd-e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b.scope. Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.562000 audit: BPF prog-id=121 op=LOAD Jul 2 07:45:01.563000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.563000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:01.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373539623634323361303935356639633131623130316163313430 Jul 2 07:45:01.563000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.563000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:01.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373539623634323361303935356639633131623130316163313430 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit: BPF prog-id=122 op=LOAD Jul 2 07:45:01.564000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002090f0 items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:01.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373539623634323361303935356639633131623130316163313430 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.564000 audit: BPF prog-id=123 op=LOAD Jul 2 07:45:01.564000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000209138 items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:01.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373539623634323361303935356639633131623130316163313430 Jul 2 07:45:01.565000 audit: BPF prog-id=123 op=UNLOAD Jul 2 07:45:01.565000 audit: BPF prog-id=122 op=UNLOAD Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { perfmon } for pid=2520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit[2520]: AVC avc: denied { bpf } for pid=2520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:01.565000 audit: BPF prog-id=124 op=LOAD Jul 2 07:45:01.565000 audit[2520]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000209548 items=0 ppid=2511 pid=2520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:01.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373539623634323361303935356639633131623130316163313430 Jul 2 07:45:01.604968 env[1197]: time="2024-07-02T07:45:01.604908040Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-bwr2p,Uid:fc2f929a-e0f6-42c2-9152-9d24d4ebf886,Namespace:calico-system,Attempt:0,} returns sandbox id \"e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b\"" Jul 2 07:45:01.605677 kubelet[2039]: E0702 07:45:01.605653 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:01.607531 env[1197]: time="2024-07-02T07:45:01.607495681Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 07:45:02.008000 audit[2545]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:02.008000 audit[2545]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd5497e020 a2=0 a3=7ffd5497e00c items=0 ppid=2243 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:02.008000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:02.009000 audit[2545]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:02.009000 audit[2545]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd5497e020 a2=0 a3=0 items=0 ppid=2243 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:02.009000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:03.148765 kubelet[2039]: E0702 07:45:03.148695 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:03.489102 env[1197]: time="2024-07-02T07:45:03.489046970Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:03.490941 env[1197]: time="2024-07-02T07:45:03.490906022Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:03.492450 env[1197]: time="2024-07-02T07:45:03.492399798Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:03.493778 env[1197]: time="2024-07-02T07:45:03.493748541Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:03.494269 env[1197]: time="2024-07-02T07:45:03.494241276Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9\"" Jul 2 07:45:03.495998 env[1197]: time="2024-07-02T07:45:03.495973009Z" level=info msg="CreateContainer within sandbox \"e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 07:45:03.508512 env[1197]: time="2024-07-02T07:45:03.508462277Z" level=info msg="CreateContainer within sandbox \"e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477\"" Jul 2 07:45:03.509122 env[1197]: time="2024-07-02T07:45:03.509084606Z" level=info msg="StartContainer for \"9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477\"" Jul 2 07:45:03.525944 systemd[1]: Started cri-containerd-9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477.scope. Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fd9a842a7a8 items=0 ppid=2511 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:03.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961636132626434316631373330636338373065396462396632333032 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit: BPF prog-id=125 op=LOAD Jul 2 07:45:03.538000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000311ec8 items=0 ppid=2511 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:03.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961636132626434316631373330636338373065396462396632333032 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit: BPF prog-id=126 op=LOAD Jul 2 07:45:03.538000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000311f18 items=0 ppid=2511 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:03.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961636132626434316631373330636338373065396462396632333032 Jul 2 07:45:03.538000 audit: BPF prog-id=126 op=UNLOAD Jul 2 07:45:03.538000 audit: BPF prog-id=125 op=UNLOAD Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:03.538000 audit: BPF prog-id=127 op=LOAD Jul 2 07:45:03.538000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000311fa8 items=0 ppid=2511 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:03.538000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961636132626434316631373330636338373065396462396632333032 Jul 2 07:45:03.553460 env[1197]: time="2024-07-02T07:45:03.553420900Z" level=info msg="StartContainer for \"9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477\" returns successfully" Jul 2 07:45:03.561649 systemd[1]: cri-containerd-9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477.scope: Deactivated successfully. Jul 2 07:45:03.565000 audit: BPF prog-id=127 op=UNLOAD Jul 2 07:45:03.576970 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477-rootfs.mount: Deactivated successfully. Jul 2 07:45:03.635013 env[1197]: time="2024-07-02T07:45:03.634949811Z" level=info msg="shim disconnected" id=9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477 Jul 2 07:45:03.635013 env[1197]: time="2024-07-02T07:45:03.635012779Z" level=warning msg="cleaning up after shim disconnected" id=9aca2bd41f1730cc870e9db9f2302edf2e1ea55f313fd50a883d19df11d1d477 namespace=k8s.io Jul 2 07:45:03.635013 env[1197]: time="2024-07-02T07:45:03.635021846Z" level=info msg="cleaning up dead shim" Jul 2 07:45:03.641509 env[1197]: time="2024-07-02T07:45:03.641456523Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:45:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2592 runtime=io.containerd.runc.v2\n" Jul 2 07:45:04.252959 kubelet[2039]: E0702 07:45:04.252912 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:04.253746 env[1197]: time="2024-07-02T07:45:04.253704297Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 07:45:05.148511 kubelet[2039]: E0702 07:45:05.148450 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:05.831326 systemd[1]: Started sshd@10-10.0.0.39:22-10.0.0.1:41896.service. Jul 2 07:45:05.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.39:22-10.0.0.1:41896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:05.832656 kernel: kauditd_printk_skb: 120 callbacks suppressed Jul 2 07:45:05.832712 kernel: audit: type=1130 audit(1719906305.830:987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.39:22-10.0.0.1:41896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:05.864000 audit[2610]: USER_ACCT pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.865412 sshd[2610]: Accepted publickey for core from 10.0.0.1 port 41896 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:05.869000 audit[2610]: CRED_ACQ pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.872082 sshd[2610]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:05.873672 kernel: audit: type=1101 audit(1719906305.864:988): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.873747 kernel: audit: type=1103 audit(1719906305.869:989): pid=2610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.873772 kernel: audit: type=1006 audit(1719906305.871:990): pid=2610 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 2 07:45:05.871000 audit[2610]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebbc29880 a2=3 a3=0 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:05.876928 systemd[1]: Started session-11.scope. Jul 2 07:45:05.877385 systemd-logind[1189]: New session 11 of user core. Jul 2 07:45:05.880042 kernel: audit: type=1300 audit(1719906305.871:990): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebbc29880 a2=3 a3=0 items=0 ppid=1 pid=2610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:05.880155 kernel: audit: type=1327 audit(1719906305.871:990): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:05.871000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:05.881000 audit[2610]: USER_START pid=2610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.883000 audit[2612]: CRED_ACQ pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.906322 kernel: audit: type=1105 audit(1719906305.881:991): pid=2610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.906362 kernel: audit: type=1103 audit(1719906305.883:992): pid=2612 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.998794 sshd[2610]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:05.999000 audit[2610]: USER_END pid=2610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:06.001025 systemd[1]: sshd@10-10.0.0.39:22-10.0.0.1:41896.service: Deactivated successfully. Jul 2 07:45:06.001662 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 07:45:05.999000 audit[2610]: CRED_DISP pid=2610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:06.004563 systemd-logind[1189]: Session 11 logged out. Waiting for processes to exit. Jul 2 07:45:06.005208 systemd-logind[1189]: Removed session 11. Jul 2 07:45:06.007366 kernel: audit: type=1106 audit(1719906305.999:993): pid=2610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:06.007431 kernel: audit: type=1104 audit(1719906305.999:994): pid=2610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:05.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.39:22-10.0.0.1:41896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:07.148716 kubelet[2039]: E0702 07:45:07.148667 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:09.148521 kubelet[2039]: E0702 07:45:09.148236 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:10.832903 env[1197]: time="2024-07-02T07:45:10.832851290Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:10.834816 env[1197]: time="2024-07-02T07:45:10.834785671Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:10.836272 env[1197]: time="2024-07-02T07:45:10.836220074Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:10.837749 env[1197]: time="2024-07-02T07:45:10.837712425Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:10.838138 env[1197]: time="2024-07-02T07:45:10.838111704Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7\"" Jul 2 07:45:10.842694 env[1197]: time="2024-07-02T07:45:10.842644363Z" level=info msg="CreateContainer within sandbox \"e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 07:45:10.857682 env[1197]: time="2024-07-02T07:45:10.857631877Z" level=info msg="CreateContainer within sandbox \"e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7\"" Jul 2 07:45:10.858173 env[1197]: time="2024-07-02T07:45:10.858133609Z" level=info msg="StartContainer for \"02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7\"" Jul 2 07:45:10.878164 systemd[1]: Started cri-containerd-02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7.scope. Jul 2 07:45:10.904353 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:45:10.904515 kernel: audit: type=1400 audit(1719906310.892:996): avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.904541 kernel: audit: type=1300 audit(1719906310.892:996): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f9b70d75dd8 items=0 ppid=2511 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:10.904559 kernel: audit: type=1327 audit(1719906310.892:996): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032663266623032346263613532386330313063353161653164626265 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f9b70d75dd8 items=0 ppid=2511 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:10.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032663266623032346263613532386330313063353161653164626265 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.913788 kernel: audit: type=1400 audit(1719906310.892:997): avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.918089 kernel: audit: type=1400 audit(1719906310.892:997): avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.918161 kernel: audit: type=1400 audit(1719906310.892:997): avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.926284 kernel: audit: type=1400 audit(1719906310.892:997): avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.926384 kernel: audit: type=1400 audit(1719906310.892:997): avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.932517 kernel: audit: type=1400 audit(1719906310.892:997): avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.932634 env[1197]: time="2024-07-02T07:45:10.930596847Z" level=info msg="StartContainer for \"02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7\" returns successfully" Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.938872 kernel: audit: type=1400 audit(1719906310.892:997): avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.892000 audit: BPF prog-id=128 op=LOAD Jul 2 07:45:10.892000 audit[2633]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0003f0218 items=0 ppid=2511 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:10.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032663266623032346263613532386330313063353161653164626265 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.897000 audit: BPF prog-id=129 op=LOAD Jul 2 07:45:10.897000 audit[2633]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0003f0268 items=0 ppid=2511 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:10.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032663266623032346263613532386330313063353161653164626265 Jul 2 07:45:10.903000 audit: BPF prog-id=129 op=UNLOAD Jul 2 07:45:10.903000 audit: BPF prog-id=128 op=UNLOAD Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:10.903000 audit: BPF prog-id=130 op=LOAD Jul 2 07:45:10.903000 audit[2633]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0003f02f8 items=0 ppid=2511 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:10.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032663266623032346263613532386330313063353161653164626265 Jul 2 07:45:11.004453 systemd[1]: Started sshd@11-10.0.0.39:22-10.0.0.1:41902.service. Jul 2 07:45:11.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.39:22-10.0.0.1:41902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:11.038000 audit[2661]: USER_ACCT pid=2661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:11.039601 sshd[2661]: Accepted publickey for core from 10.0.0.1 port 41902 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:11.040000 audit[2661]: CRED_ACQ pid=2661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:11.040000 audit[2661]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe36884350 a2=3 a3=0 items=0 ppid=1 pid=2661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:11.040000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:11.041530 sshd[2661]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:11.045334 systemd-logind[1189]: New session 12 of user core. Jul 2 07:45:11.046149 systemd[1]: Started session-12.scope. Jul 2 07:45:11.050000 audit[2661]: USER_START pid=2661 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:11.051000 audit[2663]: CRED_ACQ pid=2663 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:11.148439 kubelet[2039]: E0702 07:45:11.148309 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:11.265961 kubelet[2039]: E0702 07:45:11.265917 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:11.599106 sshd[2661]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:11.599000 audit[2661]: USER_END pid=2661 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:11.599000 audit[2661]: CRED_DISP pid=2661 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:11.601600 systemd[1]: sshd@11-10.0.0.39:22-10.0.0.1:41902.service: Deactivated successfully. Jul 2 07:45:11.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.39:22-10.0.0.1:41902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:11.602455 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 07:45:11.603324 systemd-logind[1189]: Session 12 logged out. Waiting for processes to exit. Jul 2 07:45:11.604109 systemd-logind[1189]: Removed session 12. Jul 2 07:45:12.082945 env[1197]: time="2024-07-02T07:45:12.082863863Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:45:12.084731 systemd[1]: cri-containerd-02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7.scope: Deactivated successfully. Jul 2 07:45:12.090000 audit: BPF prog-id=130 op=UNLOAD Jul 2 07:45:12.093317 kubelet[2039]: I0702 07:45:12.093289 2039 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Jul 2 07:45:12.104815 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7-rootfs.mount: Deactivated successfully. Jul 2 07:45:12.127686 kubelet[2039]: I0702 07:45:12.127628 2039 topology_manager.go:215] "Topology Admit Handler" podUID="f581c30d-8a61-4a72-a521-421e1edd6000" podNamespace="kube-system" podName="coredns-7db6d8ff4d-w962b" Jul 2 07:45:12.139105 kubelet[2039]: I0702 07:45:12.128441 2039 topology_manager.go:215] "Topology Admit Handler" podUID="39961e36-ac8c-406d-a91a-a5a770200c09" podNamespace="calico-system" podName="calico-kube-controllers-7b95666599-qccms" Jul 2 07:45:12.139105 kubelet[2039]: I0702 07:45:12.129155 2039 topology_manager.go:215] "Topology Admit Handler" podUID="6d555203-acb5-4fe8-86ac-2b58e32f4c78" podNamespace="kube-system" podName="coredns-7db6d8ff4d-6j7zm" Jul 2 07:45:12.136870 systemd[1]: Created slice kubepods-burstable-pod6d555203_acb5_4fe8_86ac_2b58e32f4c78.slice. Jul 2 07:45:12.142827 systemd[1]: Created slice kubepods-burstable-podf581c30d_8a61_4a72_a521_421e1edd6000.slice. Jul 2 07:45:12.149883 systemd[1]: Created slice kubepods-besteffort-pod39961e36_ac8c_406d_a91a_a5a770200c09.slice. Jul 2 07:45:12.162508 kubelet[2039]: I0702 07:45:12.162459 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dv5h8\" (UniqueName: \"kubernetes.io/projected/6d555203-acb5-4fe8-86ac-2b58e32f4c78-kube-api-access-dv5h8\") pod \"coredns-7db6d8ff4d-6j7zm\" (UID: \"6d555203-acb5-4fe8-86ac-2b58e32f4c78\") " pod="kube-system/coredns-7db6d8ff4d-6j7zm" Jul 2 07:45:12.162823 kubelet[2039]: I0702 07:45:12.162514 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/f581c30d-8a61-4a72-a521-421e1edd6000-config-volume\") pod \"coredns-7db6d8ff4d-w962b\" (UID: \"f581c30d-8a61-4a72-a521-421e1edd6000\") " pod="kube-system/coredns-7db6d8ff4d-w962b" Jul 2 07:45:12.162823 kubelet[2039]: I0702 07:45:12.162536 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6d555203-acb5-4fe8-86ac-2b58e32f4c78-config-volume\") pod \"coredns-7db6d8ff4d-6j7zm\" (UID: \"6d555203-acb5-4fe8-86ac-2b58e32f4c78\") " pod="kube-system/coredns-7db6d8ff4d-6j7zm" Jul 2 07:45:12.162823 kubelet[2039]: I0702 07:45:12.162555 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/39961e36-ac8c-406d-a91a-a5a770200c09-tigera-ca-bundle\") pod \"calico-kube-controllers-7b95666599-qccms\" (UID: \"39961e36-ac8c-406d-a91a-a5a770200c09\") " pod="calico-system/calico-kube-controllers-7b95666599-qccms" Jul 2 07:45:12.162823 kubelet[2039]: I0702 07:45:12.162638 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-shpj9\" (UniqueName: \"kubernetes.io/projected/f581c30d-8a61-4a72-a521-421e1edd6000-kube-api-access-shpj9\") pod \"coredns-7db6d8ff4d-w962b\" (UID: \"f581c30d-8a61-4a72-a521-421e1edd6000\") " pod="kube-system/coredns-7db6d8ff4d-w962b" Jul 2 07:45:12.162823 kubelet[2039]: I0702 07:45:12.162720 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hh2tw\" (UniqueName: \"kubernetes.io/projected/39961e36-ac8c-406d-a91a-a5a770200c09-kube-api-access-hh2tw\") pod \"calico-kube-controllers-7b95666599-qccms\" (UID: \"39961e36-ac8c-406d-a91a-a5a770200c09\") " pod="calico-system/calico-kube-controllers-7b95666599-qccms" Jul 2 07:45:12.268238 kubelet[2039]: E0702 07:45:12.268203 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:12.440706 kubelet[2039]: E0702 07:45:12.440672 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:12.441323 env[1197]: time="2024-07-02T07:45:12.441287694Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-6j7zm,Uid:6d555203-acb5-4fe8-86ac-2b58e32f4c78,Namespace:kube-system,Attempt:0,}" Jul 2 07:45:12.445626 kubelet[2039]: E0702 07:45:12.445597 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:12.446106 env[1197]: time="2024-07-02T07:45:12.446070331Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-w962b,Uid:f581c30d-8a61-4a72-a521-421e1edd6000,Namespace:kube-system,Attempt:0,}" Jul 2 07:45:12.452697 env[1197]: time="2024-07-02T07:45:12.452655160Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b95666599-qccms,Uid:39961e36-ac8c-406d-a91a-a5a770200c09,Namespace:calico-system,Attempt:0,}" Jul 2 07:45:12.727442 env[1197]: time="2024-07-02T07:45:12.727313557Z" level=info msg="shim disconnected" id=02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7 Jul 2 07:45:12.727442 env[1197]: time="2024-07-02T07:45:12.727358521Z" level=warning msg="cleaning up after shim disconnected" id=02f2fb024bca528c010c51ae1dbbe256c72f21356f9277e3777406779fa1e3e7 namespace=k8s.io Jul 2 07:45:12.727442 env[1197]: time="2024-07-02T07:45:12.727367658Z" level=info msg="cleaning up dead shim" Jul 2 07:45:12.733709 env[1197]: time="2024-07-02T07:45:12.733669957Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:45:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2695 runtime=io.containerd.runc.v2\n" Jul 2 07:45:12.844622 env[1197]: time="2024-07-02T07:45:12.844545608Z" level=error msg="Failed to destroy network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.844976 env[1197]: time="2024-07-02T07:45:12.844941802Z" level=error msg="encountered an error cleaning up failed sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.845021 env[1197]: time="2024-07-02T07:45:12.845002786Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-w962b,Uid:f581c30d-8a61-4a72-a521-421e1edd6000,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.845297 kubelet[2039]: E0702 07:45:12.845257 2039 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.845367 kubelet[2039]: E0702 07:45:12.845322 2039 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-w962b" Jul 2 07:45:12.845367 kubelet[2039]: E0702 07:45:12.845342 2039 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-w962b" Jul 2 07:45:12.845425 kubelet[2039]: E0702 07:45:12.845381 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-w962b_kube-system(f581c30d-8a61-4a72-a521-421e1edd6000)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-w962b_kube-system(f581c30d-8a61-4a72-a521-421e1edd6000)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-w962b" podUID="f581c30d-8a61-4a72-a521-421e1edd6000" Jul 2 07:45:12.845830 env[1197]: time="2024-07-02T07:45:12.845519566Z" level=error msg="Failed to destroy network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.846035 env[1197]: time="2024-07-02T07:45:12.845998525Z" level=error msg="encountered an error cleaning up failed sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.846102 env[1197]: time="2024-07-02T07:45:12.846060311Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-6j7zm,Uid:6d555203-acb5-4fe8-86ac-2b58e32f4c78,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.846395 kubelet[2039]: E0702 07:45:12.846342 2039 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.846445 kubelet[2039]: E0702 07:45:12.846423 2039 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-6j7zm" Jul 2 07:45:12.846498 kubelet[2039]: E0702 07:45:12.846452 2039 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-6j7zm" Jul 2 07:45:12.846562 kubelet[2039]: E0702 07:45:12.846526 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-6j7zm_kube-system(6d555203-acb5-4fe8-86ac-2b58e32f4c78)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-6j7zm_kube-system(6d555203-acb5-4fe8-86ac-2b58e32f4c78)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-6j7zm" podUID="6d555203-acb5-4fe8-86ac-2b58e32f4c78" Jul 2 07:45:12.870121 env[1197]: time="2024-07-02T07:45:12.870047885Z" level=error msg="Failed to destroy network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.870504 env[1197]: time="2024-07-02T07:45:12.870457213Z" level=error msg="encountered an error cleaning up failed sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.870556 env[1197]: time="2024-07-02T07:45:12.870531222Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b95666599-qccms,Uid:39961e36-ac8c-406d-a91a-a5a770200c09,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.870779 kubelet[2039]: E0702 07:45:12.870739 2039 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:12.870860 kubelet[2039]: E0702 07:45:12.870799 2039 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7b95666599-qccms" Jul 2 07:45:12.870860 kubelet[2039]: E0702 07:45:12.870817 2039 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7b95666599-qccms" Jul 2 07:45:12.870930 kubelet[2039]: E0702 07:45:12.870861 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7b95666599-qccms_calico-system(39961e36-ac8c-406d-a91a-a5a770200c09)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7b95666599-qccms_calico-system(39961e36-ac8c-406d-a91a-a5a770200c09)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7b95666599-qccms" podUID="39961e36-ac8c-406d-a91a-a5a770200c09" Jul 2 07:45:13.105726 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8-shm.mount: Deactivated successfully. Jul 2 07:45:13.152734 systemd[1]: Created slice kubepods-besteffort-podcc8c263d_ad60_4d91_90ca_67fb1e4a4afa.slice. Jul 2 07:45:13.154551 env[1197]: time="2024-07-02T07:45:13.154513112Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zjz6j,Uid:cc8c263d-ad60-4d91-90ca-67fb1e4a4afa,Namespace:calico-system,Attempt:0,}" Jul 2 07:45:13.202107 env[1197]: time="2024-07-02T07:45:13.202034093Z" level=error msg="Failed to destroy network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.202537 env[1197]: time="2024-07-02T07:45:13.202502402Z" level=error msg="encountered an error cleaning up failed sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.202660 env[1197]: time="2024-07-02T07:45:13.202622688Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zjz6j,Uid:cc8c263d-ad60-4d91-90ca-67fb1e4a4afa,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.202899 kubelet[2039]: E0702 07:45:13.202864 2039 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.203116 kubelet[2039]: E0702 07:45:13.202924 2039 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zjz6j" Jul 2 07:45:13.203116 kubelet[2039]: E0702 07:45:13.202945 2039 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zjz6j" Jul 2 07:45:13.203116 kubelet[2039]: E0702 07:45:13.202985 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-zjz6j_calico-system(cc8c263d-ad60-4d91-90ca-67fb1e4a4afa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-zjz6j_calico-system(cc8c263d-ad60-4d91-90ca-67fb1e4a4afa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:13.203795 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288-shm.mount: Deactivated successfully. Jul 2 07:45:13.270027 kubelet[2039]: I0702 07:45:13.269992 2039 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Jul 2 07:45:13.270631 env[1197]: time="2024-07-02T07:45:13.270584623Z" level=info msg="StopPodSandbox for \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\"" Jul 2 07:45:13.271003 kubelet[2039]: I0702 07:45:13.270969 2039 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Jul 2 07:45:13.271528 env[1197]: time="2024-07-02T07:45:13.271493911Z" level=info msg="StopPodSandbox for \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\"" Jul 2 07:45:13.272907 kubelet[2039]: I0702 07:45:13.272645 2039 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Jul 2 07:45:13.274152 env[1197]: time="2024-07-02T07:45:13.274112556Z" level=info msg="StopPodSandbox for \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\"" Jul 2 07:45:13.278266 kubelet[2039]: E0702 07:45:13.278223 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:13.281943 env[1197]: time="2024-07-02T07:45:13.281726015Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 07:45:13.282666 kubelet[2039]: I0702 07:45:13.282430 2039 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Jul 2 07:45:13.282909 env[1197]: time="2024-07-02T07:45:13.282859673Z" level=info msg="StopPodSandbox for \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\"" Jul 2 07:45:13.309590 env[1197]: time="2024-07-02T07:45:13.309516273Z" level=error msg="StopPodSandbox for \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\" failed" error="failed to destroy network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.309796 kubelet[2039]: E0702 07:45:13.309756 2039 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Jul 2 07:45:13.309888 kubelet[2039]: E0702 07:45:13.309815 2039 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8"} Jul 2 07:45:13.309888 kubelet[2039]: E0702 07:45:13.309870 2039 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f581c30d-8a61-4a72-a521-421e1edd6000\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:45:13.309984 kubelet[2039]: E0702 07:45:13.309895 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f581c30d-8a61-4a72-a521-421e1edd6000\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-w962b" podUID="f581c30d-8a61-4a72-a521-421e1edd6000" Jul 2 07:45:13.314408 env[1197]: time="2024-07-02T07:45:13.314334968Z" level=error msg="StopPodSandbox for \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\" failed" error="failed to destroy network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.314845 kubelet[2039]: E0702 07:45:13.314806 2039 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Jul 2 07:45:13.314930 kubelet[2039]: E0702 07:45:13.314856 2039 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288"} Jul 2 07:45:13.314930 kubelet[2039]: E0702 07:45:13.314900 2039 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:45:13.315145 kubelet[2039]: E0702 07:45:13.314934 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zjz6j" podUID="cc8c263d-ad60-4d91-90ca-67fb1e4a4afa" Jul 2 07:45:13.315836 env[1197]: time="2024-07-02T07:45:13.315771804Z" level=error msg="StopPodSandbox for \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\" failed" error="failed to destroy network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.316009 kubelet[2039]: E0702 07:45:13.315942 2039 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Jul 2 07:45:13.316009 kubelet[2039]: E0702 07:45:13.315989 2039 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979"} Jul 2 07:45:13.316115 kubelet[2039]: E0702 07:45:13.316029 2039 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6d555203-acb5-4fe8-86ac-2b58e32f4c78\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:45:13.316115 kubelet[2039]: E0702 07:45:13.316066 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6d555203-acb5-4fe8-86ac-2b58e32f4c78\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-6j7zm" podUID="6d555203-acb5-4fe8-86ac-2b58e32f4c78" Jul 2 07:45:13.327860 env[1197]: time="2024-07-02T07:45:13.327807343Z" level=error msg="StopPodSandbox for \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\" failed" error="failed to destroy network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:45:13.328132 kubelet[2039]: E0702 07:45:13.328077 2039 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Jul 2 07:45:13.328132 kubelet[2039]: E0702 07:45:13.328127 2039 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d"} Jul 2 07:45:13.328362 kubelet[2039]: E0702 07:45:13.328159 2039 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"39961e36-ac8c-406d-a91a-a5a770200c09\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:45:13.328362 kubelet[2039]: E0702 07:45:13.328190 2039 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"39961e36-ac8c-406d-a91a-a5a770200c09\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7b95666599-qccms" podUID="39961e36-ac8c-406d-a91a-a5a770200c09" Jul 2 07:45:16.604138 systemd[1]: Started sshd@12-10.0.0.39:22-10.0.0.1:57616.service. Jul 2 07:45:16.605809 kernel: kauditd_printk_skb: 45 callbacks suppressed Jul 2 07:45:16.605851 kernel: audit: type=1130 audit(1719906316.603:1012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.39:22-10.0.0.1:57616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:16.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.39:22-10.0.0.1:57616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:16.637000 audit[2951]: USER_ACCT pid=2951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.637865 sshd[2951]: Accepted publickey for core from 10.0.0.1 port 57616 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:16.641000 audit[2951]: CRED_ACQ pid=2951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.642202 sshd[2951]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:16.645520 kernel: audit: type=1101 audit(1719906316.637:1013): pid=2951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.645568 kernel: audit: type=1103 audit(1719906316.641:1014): pid=2951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.645587 kernel: audit: type=1006 audit(1719906316.641:1015): pid=2951 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 2 07:45:16.646001 systemd-logind[1189]: New session 13 of user core. Jul 2 07:45:16.646714 systemd[1]: Started session-13.scope. Jul 2 07:45:16.641000 audit[2951]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcad2c65b0 a2=3 a3=0 items=0 ppid=1 pid=2951 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:16.651676 kernel: audit: type=1300 audit(1719906316.641:1015): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcad2c65b0 a2=3 a3=0 items=0 ppid=1 pid=2951 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:16.651789 kernel: audit: type=1327 audit(1719906316.641:1015): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:16.641000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:16.650000 audit[2951]: USER_START pid=2951 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.663655 kernel: audit: type=1105 audit(1719906316.650:1016): pid=2951 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.663712 kernel: audit: type=1103 audit(1719906316.652:1017): pid=2953 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.652000 audit[2953]: CRED_ACQ pid=2953 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.793850 sshd[2951]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:16.794000 audit[2951]: USER_END pid=2951 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.797642 systemd[1]: Started sshd@13-10.0.0.39:22-10.0.0.1:57628.service. Jul 2 07:45:16.799767 kernel: audit: type=1106 audit(1719906316.794:1018): pid=2951 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.799823 kernel: audit: type=1130 audit(1719906316.798:1019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.39:22-10.0.0.1:57628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:16.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.39:22-10.0.0.1:57628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:16.801038 systemd[1]: sshd@12-10.0.0.39:22-10.0.0.1:57616.service: Deactivated successfully. Jul 2 07:45:16.801658 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 07:45:16.802247 systemd-logind[1189]: Session 13 logged out. Waiting for processes to exit. Jul 2 07:45:16.802953 systemd-logind[1189]: Removed session 13. Jul 2 07:45:16.799000 audit[2951]: CRED_DISP pid=2951 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.39:22-10.0.0.1:57616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:16.829000 audit[2964]: USER_ACCT pid=2964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.830048 sshd[2964]: Accepted publickey for core from 10.0.0.1 port 57628 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:16.830000 audit[2964]: CRED_ACQ pid=2964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.830000 audit[2964]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff06db51a0 a2=3 a3=0 items=0 ppid=1 pid=2964 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:16.830000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:16.831124 sshd[2964]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:16.834708 systemd-logind[1189]: New session 14 of user core. Jul 2 07:45:16.835438 systemd[1]: Started session-14.scope. Jul 2 07:45:16.839000 audit[2964]: USER_START pid=2964 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.840000 audit[2967]: CRED_ACQ pid=2967 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.979093 sshd[2964]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:16.981859 systemd[1]: Started sshd@14-10.0.0.39:22-10.0.0.1:57642.service. Jul 2 07:45:16.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.39:22-10.0.0.1:57642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:16.995000 audit[2964]: USER_END pid=2964 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:16.995000 audit[2964]: CRED_DISP pid=2964 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:17.001039 systemd[1]: sshd@13-10.0.0.39:22-10.0.0.1:57628.service: Deactivated successfully. Jul 2 07:45:17.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.39:22-10.0.0.1:57628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:17.001948 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 07:45:17.007384 systemd-logind[1189]: Session 14 logged out. Waiting for processes to exit. Jul 2 07:45:17.008834 systemd-logind[1189]: Removed session 14. Jul 2 07:45:17.025000 audit[2975]: USER_ACCT pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:17.026185 sshd[2975]: Accepted publickey for core from 10.0.0.1 port 57642 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:17.026000 audit[2975]: CRED_ACQ pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:17.026000 audit[2975]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2d843620 a2=3 a3=0 items=0 ppid=1 pid=2975 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:17.026000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:17.027700 sshd[2975]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:17.031680 systemd-logind[1189]: New session 15 of user core. Jul 2 07:45:17.032675 systemd[1]: Started session-15.scope. Jul 2 07:45:17.036000 audit[2975]: USER_START pid=2975 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:17.038000 audit[2978]: CRED_ACQ pid=2978 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:17.145570 sshd[2975]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:17.146000 audit[2975]: USER_END pid=2975 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:17.146000 audit[2975]: CRED_DISP pid=2975 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:17.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.39:22-10.0.0.1:57642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:17.148110 systemd[1]: sshd@14-10.0.0.39:22-10.0.0.1:57642.service: Deactivated successfully. Jul 2 07:45:17.148745 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 07:45:17.149699 systemd-logind[1189]: Session 15 logged out. Waiting for processes to exit. Jul 2 07:45:17.150457 systemd-logind[1189]: Removed session 15. Jul 2 07:45:19.952000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:19.952000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:19.952000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c0066993e0 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:45:19.952000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:45:19.952000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c0072059e0 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:45:19.952000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:45:19.952000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:19.952000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00625bc00 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:45:19.952000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:45:19.952000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:19.952000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c006e17ad0 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:45:19.952000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:45:19.954000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:19.954000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c0065ae480 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:45:19.954000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:45:19.954000 audit[1925]: AVC avc: denied { watch } for pid=1925 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:19.954000 audit[1925]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00503f820 a2=fc6 a3=0 items=0 ppid=1778 pid=1925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c1010 key=(null) Jul 2 07:45:19.954000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3339002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:45:20.044000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:20.044000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:20.044000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e1c300 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:45:20.044000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:45:20.044000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00139c6a0 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:45:20.044000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:45:20.288542 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount269917722.mount: Deactivated successfully. Jul 2 07:45:20.907394 env[1197]: time="2024-07-02T07:45:20.907342956Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:21.021648 env[1197]: time="2024-07-02T07:45:21.021595367Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:21.070923 env[1197]: time="2024-07-02T07:45:21.070876762Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:21.074454 env[1197]: time="2024-07-02T07:45:21.074424567Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:21.074831 env[1197]: time="2024-07-02T07:45:21.074803933Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49\"" Jul 2 07:45:21.086183 env[1197]: time="2024-07-02T07:45:21.086143839Z" level=info msg="CreateContainer within sandbox \"e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 07:45:21.297620 env[1197]: time="2024-07-02T07:45:21.297565665Z" level=info msg="CreateContainer within sandbox \"e0759b6423a0955f9c11b101ac1402112ae04e04b278e091b00a5e0386c30d4b\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9\"" Jul 2 07:45:21.298070 env[1197]: time="2024-07-02T07:45:21.298030696Z" level=info msg="StartContainer for \"4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9\"" Jul 2 07:45:21.322888 systemd[1]: Started cri-containerd-4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9.scope. Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fcbd4000488 items=0 ppid=2511 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:21.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643731343733613636633935333934613166306336643539623966 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.342000 audit: BPF prog-id=131 op=LOAD Jul 2 07:45:21.342000 audit[2998]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c000388208 items=0 ppid=2511 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:21.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643731343733613636633935333934613166306336643539623966 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit: BPF prog-id=132 op=LOAD Jul 2 07:45:21.343000 audit[2998]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c000388258 items=0 ppid=2511 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:21.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643731343733613636633935333934613166306336643539623966 Jul 2 07:45:21.343000 audit: BPF prog-id=132 op=UNLOAD Jul 2 07:45:21.343000 audit: BPF prog-id=131 op=UNLOAD Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { perfmon } for pid=2998 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit[2998]: AVC avc: denied { bpf } for pid=2998 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:21.343000 audit: BPF prog-id=133 op=LOAD Jul 2 07:45:21.343000 audit[2998]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c0003882e8 items=0 ppid=2511 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:21.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466643731343733613636633935333934613166306336643539623966 Jul 2 07:45:21.385000 audit[3026]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3026 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:21.385000 audit[3026]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffe125d24b0 a2=0 a3=7ffe125d249c items=0 ppid=2243 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:21.385000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:21.386078 env[1197]: time="2024-07-02T07:45:21.385712560Z" level=info msg="StartContainer for \"4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9\" returns successfully" Jul 2 07:45:21.385000 audit[3026]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3026 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:21.385000 audit[3026]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe125d24b0 a2=0 a3=7ffe125d249c items=0 ppid=2243 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:21.385000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:21.434751 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 07:45:21.434880 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 07:45:22.149414 systemd[1]: Started sshd@15-10.0.0.39:22-10.0.0.1:57644.service. Jul 2 07:45:22.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.39:22-10.0.0.1:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:22.150755 kernel: kauditd_printk_skb: 96 callbacks suppressed Jul 2 07:45:22.150802 kernel: audit: type=1130 audit(1719906322.149:1055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.39:22-10.0.0.1:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:22.180000 audit[3058]: USER_ACCT pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.181357 sshd[3058]: Accepted publickey for core from 10.0.0.1 port 57644 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:22.182717 sshd[3058]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:22.181000 audit[3058]: CRED_ACQ pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.186106 systemd-logind[1189]: New session 16 of user core. Jul 2 07:45:22.186798 systemd[1]: Started session-16.scope. Jul 2 07:45:22.188772 kernel: audit: type=1101 audit(1719906322.180:1056): pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.188817 kernel: audit: type=1103 audit(1719906322.181:1057): pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.188835 kernel: audit: type=1006 audit(1719906322.181:1058): pid=3058 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 2 07:45:22.181000 audit[3058]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd24bfd780 a2=3 a3=0 items=0 ppid=1 pid=3058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.194939 kernel: audit: type=1300 audit(1719906322.181:1058): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd24bfd780 a2=3 a3=0 items=0 ppid=1 pid=3058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.194989 kernel: audit: type=1327 audit(1719906322.181:1058): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:22.181000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:22.196258 kernel: audit: type=1105 audit(1719906322.189:1059): pid=3058 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.189000 audit[3058]: USER_START pid=3058 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.200456 kernel: audit: type=1103 audit(1719906322.190:1060): pid=3060 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.190000 audit[3060]: CRED_ACQ pid=3060 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.288279 sshd[3058]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:22.288000 audit[3058]: USER_END pid=3058 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.290782 systemd[1]: sshd@15-10.0.0.39:22-10.0.0.1:57644.service: Deactivated successfully. Jul 2 07:45:22.291552 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 07:45:22.292081 systemd-logind[1189]: Session 16 logged out. Waiting for processes to exit. Jul 2 07:45:22.292759 systemd-logind[1189]: Removed session 16. Jul 2 07:45:22.288000 audit[3058]: CRED_DISP pid=3058 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.296926 kernel: audit: type=1106 audit(1719906322.288:1061): pid=3058 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.296980 kernel: audit: type=1104 audit(1719906322.288:1062): pid=3058 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:22.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.39:22-10.0.0.1:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:22.301450 kubelet[2039]: E0702 07:45:22.301428 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:22.314482 systemd[1]: run-containerd-runc-k8s.io-4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9-runc.62hIrP.mount: Deactivated successfully. Jul 2 07:45:22.667000 audit[3139]: AVC avc: denied { write } for pid=3139 comm="tee" name="fd" dev="proc" ino=25790 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:45:22.667000 audit[3139]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdf8a37a2f a2=241 a3=1b6 items=1 ppid=3104 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.667000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 07:45:22.667000 audit: PATH item=0 name="/dev/fd/63" inode=25783 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:45:22.667000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:45:22.672000 audit[3148]: AVC avc: denied { write } for pid=3148 comm="tee" name="fd" dev="proc" ino=24179 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:45:22.672000 audit[3148]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff2ea5ea2e a2=241 a3=1b6 items=1 ppid=3106 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.672000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 07:45:22.672000 audit: PATH item=0 name="/dev/fd/63" inode=25134 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:45:22.672000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:45:22.677000 audit[3150]: AVC avc: denied { write } for pid=3150 comm="tee" name="fd" dev="proc" ino=26806 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:45:22.677000 audit[3150]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcf4b79a2e a2=241 a3=1b6 items=1 ppid=3113 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.677000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 07:45:22.677000 audit: PATH item=0 name="/dev/fd/63" inode=25135 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:45:22.677000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:45:22.688000 audit[3158]: AVC avc: denied { write } for pid=3158 comm="tee" name="fd" dev="proc" ino=25807 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:45:22.688000 audit[3158]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdd1d6ea1e a2=241 a3=1b6 items=1 ppid=3118 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.688000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 07:45:22.688000 audit: PATH item=0 name="/dev/fd/63" inode=25794 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:45:22.688000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:45:22.694000 audit[3176]: AVC avc: denied { write } for pid=3176 comm="tee" name="fd" dev="proc" ino=25811 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:45:22.696000 audit[3173]: AVC avc: denied { write } for pid=3173 comm="tee" name="fd" dev="proc" ino=25817 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:45:22.694000 audit[3176]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffc4fbda1f a2=241 a3=1b6 items=1 ppid=3114 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.694000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 07:45:22.694000 audit: PATH item=0 name="/dev/fd/63" inode=25804 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:45:22.694000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:45:22.696000 audit[3173]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe294eba2e a2=241 a3=1b6 items=1 ppid=3112 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.696000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 07:45:22.696000 audit: PATH item=0 name="/dev/fd/63" inode=25801 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:45:22.696000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:45:22.726000 audit[3182]: AVC avc: denied { write } for pid=3182 comm="tee" name="fd" dev="proc" ino=26816 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:45:22.726000 audit[3182]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc75bfba30 a2=241 a3=1b6 items=1 ppid=3105 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.726000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 07:45:22.726000 audit: PATH item=0 name="/dev/fd/63" inode=25814 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:45:22.726000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:45:22.892559 systemd-networkd[1022]: vxlan.calico: Link UP Jul 2 07:45:22.892570 systemd-networkd[1022]: vxlan.calico: Gained carrier Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.908000 audit: BPF prog-id=134 op=LOAD Jul 2 07:45:22.908000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd06d73fb0 a2=70 a3=7f15f8e61000 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.908000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit: BPF prog-id=134 op=UNLOAD Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit: BPF prog-id=135 op=LOAD Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd06d73fb0 a2=70 a3=6f items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit: BPF prog-id=135 op=UNLOAD Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd06d73f60 a2=70 a3=7ffd06d73fb0 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit: BPF prog-id=136 op=LOAD Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd06d73f40 a2=70 a3=7ffd06d73fb0 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit: BPF prog-id=136 op=UNLOAD Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06d74020 a2=70 a3=0 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06d74010 a2=70 a3=0 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd06d73f80 a2=70 a3=0 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd06d74050 a2=70 a3=175e8b0 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd06d74050 a2=70 a3=175b880 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.909000 audit: BPF prog-id=137 op=LOAD Jul 2 07:45:22.909000 audit[3254]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd06d73f70 a2=70 a3=0 items=0 ppid=3107 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.909000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:45:22.912000 audit[3258]: AVC avc: denied { bpf } for pid=3258 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.912000 audit[3258]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffed8f3b0e0 a2=70 a3=208 items=0 ppid=3107 pid=3258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.912000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:45:22.912000 audit[3258]: AVC avc: denied { bpf } for pid=3258 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:22.912000 audit[3258]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffed8f3afb0 a2=70 a3=3 items=0 ppid=3107 pid=3258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.912000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:45:22.922000 audit: BPF prog-id=137 op=UNLOAD Jul 2 07:45:22.958000 audit[3289]: NETFILTER_CFG table=mangle:97 family=2 entries=16 op=nft_register_chain pid=3289 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:22.958000 audit[3289]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffdec06f430 a2=0 a3=7ffdec06f41c items=0 ppid=3107 pid=3289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.958000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:22.959000 audit[3284]: NETFILTER_CFG table=raw:98 family=2 entries=19 op=nft_register_chain pid=3284 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:22.959000 audit[3284]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffe41432b20 a2=0 a3=7ffe41432b0c items=0 ppid=3107 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.959000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:22.963000 audit[3288]: NETFILTER_CFG table=nat:99 family=2 entries=15 op=nft_register_chain pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:22.963000 audit[3288]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffcd8467eb0 a2=0 a3=7ffcd8467e9c items=0 ppid=3107 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.963000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:22.967000 audit[3291]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:22.967000 audit[3291]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffccdf22110 a2=0 a3=7ffccdf220fc items=0 ppid=3107 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:22.967000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:23.303632 kubelet[2039]: E0702 07:45:23.303522 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:23.318697 systemd[1]: run-containerd-runc-k8s.io-4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9-runc.3aLRk9.mount: Deactivated successfully. Jul 2 07:45:24.149373 env[1197]: time="2024-07-02T07:45:24.149330501Z" level=info msg="StopPodSandbox for \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\"" Jul 2 07:45:24.188085 kubelet[2039]: I0702 07:45:24.188011 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-bwr2p" podStartSLOduration=3.718607812 podStartE2EDuration="23.187991729s" podCreationTimestamp="2024-07-02 07:45:01 +0000 UTC" firstStartedPulling="2024-07-02 07:45:01.606203063 +0000 UTC m=+38.632655869" lastFinishedPulling="2024-07-02 07:45:21.07558697 +0000 UTC m=+58.102039786" observedRunningTime="2024-07-02 07:45:22.312399599 +0000 UTC m=+59.338852425" watchObservedRunningTime="2024-07-02 07:45:24.187991729 +0000 UTC m=+61.214444545" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.188 [INFO][3335] k8s.go 608: Cleaning up netns ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.188 [INFO][3335] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" iface="eth0" netns="/var/run/netns/cni-0c9d2def-4a39-077e-f95b-7eb46c12256f" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.188 [INFO][3335] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" iface="eth0" netns="/var/run/netns/cni-0c9d2def-4a39-077e-f95b-7eb46c12256f" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.189 [INFO][3335] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" iface="eth0" netns="/var/run/netns/cni-0c9d2def-4a39-077e-f95b-7eb46c12256f" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.189 [INFO][3335] k8s.go 615: Releasing IP address(es) ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.189 [INFO][3335] utils.go 188: Calico CNI releasing IP address ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.226 [INFO][3342] ipam_plugin.go 411: Releasing address using handleID ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" HandleID="k8s-pod-network.72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Workload="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.226 [INFO][3342] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.226 [INFO][3342] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.232 [WARNING][3342] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" HandleID="k8s-pod-network.72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Workload="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.232 [INFO][3342] ipam_plugin.go 439: Releasing address using workloadID ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" HandleID="k8s-pod-network.72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Workload="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.233 [INFO][3342] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:24.236193 env[1197]: 2024-07-02 07:45:24.234 [INFO][3335] k8s.go 621: Teardown processing complete. ContainerID="72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d" Jul 2 07:45:24.236760 env[1197]: time="2024-07-02T07:45:24.236354740Z" level=info msg="TearDown network for sandbox \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\" successfully" Jul 2 07:45:24.236760 env[1197]: time="2024-07-02T07:45:24.236402533Z" level=info msg="StopPodSandbox for \"72bf0792c4f1b17e59d8ddbe231dfb9e6998849fea0aa7d88663e77d7d97649d\" returns successfully" Jul 2 07:45:24.237118 env[1197]: time="2024-07-02T07:45:24.237089129Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b95666599-qccms,Uid:39961e36-ac8c-406d-a91a-a5a770200c09,Namespace:calico-system,Attempt:1,}" Jul 2 07:45:24.238514 systemd[1]: run-netns-cni\x2d0c9d2def\x2d4a39\x2d077e\x2df95b\x2d7eb46c12256f.mount: Deactivated successfully. Jul 2 07:45:24.436646 systemd-networkd[1022]: vxlan.calico: Gained IPv6LL Jul 2 07:45:24.608798 systemd-networkd[1022]: calie37899ea351: Link UP Jul 2 07:45:24.610806 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:45:24.610918 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie37899ea351: link becomes ready Jul 2 07:45:24.611108 systemd-networkd[1022]: calie37899ea351: Gained carrier Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.554 [INFO][3350] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0 calico-kube-controllers-7b95666599- calico-system 39961e36-ac8c-406d-a91a-a5a770200c09 898 0 2024-07-02 07:45:01 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7b95666599 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7b95666599-qccms eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calie37899ea351 [] []}} ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.554 [INFO][3350] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.577 [INFO][3362] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" HandleID="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Workload="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.584 [INFO][3362] ipam_plugin.go 264: Auto assigning IP ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" HandleID="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Workload="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000127b20), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7b95666599-qccms", "timestamp":"2024-07-02 07:45:24.577927837 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.584 [INFO][3362] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.584 [INFO][3362] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.585 [INFO][3362] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.586 [INFO][3362] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.589 [INFO][3362] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.593 [INFO][3362] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.595 [INFO][3362] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.596 [INFO][3362] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.596 [INFO][3362] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.598 [INFO][3362] ipam.go 1685: Creating new handle: k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.601 [INFO][3362] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.605 [INFO][3362] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.605 [INFO][3362] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" host="localhost" Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.605 [INFO][3362] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:24.624234 env[1197]: 2024-07-02 07:45:24.605 [INFO][3362] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" HandleID="k8s-pod-network.0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Workload="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.624866 env[1197]: 2024-07-02 07:45:24.607 [INFO][3350] k8s.go 386: Populated endpoint ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0", GenerateName:"calico-kube-controllers-7b95666599-", Namespace:"calico-system", SelfLink:"", UID:"39961e36-ac8c-406d-a91a-a5a770200c09", ResourceVersion:"898", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 45, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7b95666599", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7b95666599-qccms", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie37899ea351", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:24.624866 env[1197]: 2024-07-02 07:45:24.607 [INFO][3350] k8s.go 387: Calico CNI using IPs: [192.168.88.129/32] ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.624866 env[1197]: 2024-07-02 07:45:24.607 [INFO][3350] dataplane_linux.go 68: Setting the host side veth name to calie37899ea351 ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.624866 env[1197]: 2024-07-02 07:45:24.610 [INFO][3350] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.624866 env[1197]: 2024-07-02 07:45:24.611 [INFO][3350] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0", GenerateName:"calico-kube-controllers-7b95666599-", Namespace:"calico-system", SelfLink:"", UID:"39961e36-ac8c-406d-a91a-a5a770200c09", ResourceVersion:"898", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 45, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7b95666599", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc", Pod:"calico-kube-controllers-7b95666599-qccms", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie37899ea351", MAC:"4e:26:63:87:b3:aa", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:24.624866 env[1197]: 2024-07-02 07:45:24.620 [INFO][3350] k8s.go 500: Wrote updated endpoint to datastore ContainerID="0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc" Namespace="calico-system" Pod="calico-kube-controllers-7b95666599-qccms" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7b95666599--qccms-eth0" Jul 2 07:45:24.627000 audit[3380]: NETFILTER_CFG table=filter:101 family=2 entries=34 op=nft_register_chain pid=3380 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:24.627000 audit[3380]: SYSCALL arch=c000003e syscall=46 success=yes exit=19148 a0=3 a1=7fffa719d960 a2=0 a3=7fffa719d94c items=0 ppid=3107 pid=3380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:24.627000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:24.628000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:24.628000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:24.628000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00128eb60 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:45:24.628000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:45:24.628000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00139d0e0 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:45:24.628000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:45:24.629000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:24.629000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013627c0 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:45:24.629000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:45:24.630000 audit[1901]: AVC avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:45:24.630000 audit[1901]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013627e0 a2=fc6 a3=0 items=0 ppid=1742 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c380 key=(null) Jul 2 07:45:24.630000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:45:24.636620 env[1197]: time="2024-07-02T07:45:24.636539869Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:45:24.636620 env[1197]: time="2024-07-02T07:45:24.636582491Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:45:24.636620 env[1197]: time="2024-07-02T07:45:24.636592751Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:45:24.636800 env[1197]: time="2024-07-02T07:45:24.636751037Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc pid=3391 runtime=io.containerd.runc.v2 Jul 2 07:45:24.651503 systemd[1]: Started cri-containerd-0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc.scope. Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit: BPF prog-id=138 op=LOAD Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3391 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:24.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353138333634623737356261643934373164386565343331373663 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3391 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:24.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353138333634623737356261643934373164386565343331373663 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.659000 audit: BPF prog-id=139 op=LOAD Jul 2 07:45:24.659000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003e01c0 items=0 ppid=3391 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:24.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353138333634623737356261643934373164386565343331373663 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit: BPF prog-id=140 op=LOAD Jul 2 07:45:24.660000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003e0208 items=0 ppid=3391 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:24.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353138333634623737356261643934373164386565343331373663 Jul 2 07:45:24.660000 audit: BPF prog-id=140 op=UNLOAD Jul 2 07:45:24.660000 audit: BPF prog-id=139 op=UNLOAD Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { perfmon } for pid=3402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit[3402]: AVC avc: denied { bpf } for pid=3402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:24.660000 audit: BPF prog-id=141 op=LOAD Jul 2 07:45:24.660000 audit[3402]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e0618 items=0 ppid=3391 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:24.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353138333634623737356261643934373164386565343331373663 Jul 2 07:45:24.662511 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:45:24.683034 env[1197]: time="2024-07-02T07:45:24.682984281Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7b95666599-qccms,Uid:39961e36-ac8c-406d-a91a-a5a770200c09,Namespace:calico-system,Attempt:1,} returns sandbox id \"0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc\"" Jul 2 07:45:24.684560 env[1197]: time="2024-07-02T07:45:24.684525269Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 07:45:25.149375 env[1197]: time="2024-07-02T07:45:25.149316531Z" level=info msg="StopPodSandbox for \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\"" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.187 [INFO][3443] k8s.go 608: Cleaning up netns ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.188 [INFO][3443] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" iface="eth0" netns="/var/run/netns/cni-c84078bc-0637-df7e-e026-4a7a2ec26c9c" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.188 [INFO][3443] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" iface="eth0" netns="/var/run/netns/cni-c84078bc-0637-df7e-e026-4a7a2ec26c9c" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.188 [INFO][3443] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" iface="eth0" netns="/var/run/netns/cni-c84078bc-0637-df7e-e026-4a7a2ec26c9c" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.188 [INFO][3443] k8s.go 615: Releasing IP address(es) ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.188 [INFO][3443] utils.go 188: Calico CNI releasing IP address ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.206 [INFO][3450] ipam_plugin.go 411: Releasing address using handleID ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" HandleID="k8s-pod-network.5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Workload="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.207 [INFO][3450] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.207 [INFO][3450] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.211 [WARNING][3450] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" HandleID="k8s-pod-network.5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Workload="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.211 [INFO][3450] ipam_plugin.go 439: Releasing address using workloadID ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" HandleID="k8s-pod-network.5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Workload="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.212 [INFO][3450] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:25.215687 env[1197]: 2024-07-02 07:45:25.214 [INFO][3443] k8s.go 621: Teardown processing complete. ContainerID="5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288" Jul 2 07:45:25.216269 env[1197]: time="2024-07-02T07:45:25.216236735Z" level=info msg="TearDown network for sandbox \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\" successfully" Jul 2 07:45:25.216344 env[1197]: time="2024-07-02T07:45:25.216323603Z" level=info msg="StopPodSandbox for \"5b8d64b2f03fabf10ec53772c0dc9b4a6941614ab7f6ffe174c8aed928dd4288\" returns successfully" Jul 2 07:45:25.217000 env[1197]: time="2024-07-02T07:45:25.216978779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zjz6j,Uid:cc8c263d-ad60-4d91-90ca-67fb1e4a4afa,Namespace:calico-system,Attempt:1,}" Jul 2 07:45:25.305032 systemd-networkd[1022]: caliea6cbd4704b: Link UP Jul 2 07:45:25.306492 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliea6cbd4704b: link becomes ready Jul 2 07:45:25.306603 systemd-networkd[1022]: caliea6cbd4704b: Gained carrier Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.253 [INFO][3457] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--zjz6j-eth0 csi-node-driver- calico-system cc8c263d-ad60-4d91-90ca-67fb1e4a4afa 909 0 2024-07-02 07:45:01 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6cc9df58f4 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-zjz6j eth0 default [] [] [kns.calico-system ksa.calico-system.default] caliea6cbd4704b [] []}} ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.253 [INFO][3457] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.276 [INFO][3472] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" HandleID="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Workload="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.283 [INFO][3472] ipam_plugin.go 264: Auto assigning IP ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" HandleID="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Workload="localhost-k8s-csi--node--driver--zjz6j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000284e10), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-zjz6j", "timestamp":"2024-07-02 07:45:25.276399849 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.283 [INFO][3472] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.283 [INFO][3472] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.283 [INFO][3472] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.284 [INFO][3472] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.287 [INFO][3472] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.291 [INFO][3472] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.292 [INFO][3472] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.294 [INFO][3472] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.294 [INFO][3472] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.295 [INFO][3472] ipam.go 1685: Creating new handle: k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.297 [INFO][3472] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.301 [INFO][3472] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.301 [INFO][3472] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" host="localhost" Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.301 [INFO][3472] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:25.317559 env[1197]: 2024-07-02 07:45:25.301 [INFO][3472] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" HandleID="k8s-pod-network.9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Workload="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.318193 env[1197]: 2024-07-02 07:45:25.302 [INFO][3457] k8s.go 386: Populated endpoint ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zjz6j-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa", ResourceVersion:"909", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 45, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6cc9df58f4", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-zjz6j", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliea6cbd4704b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:25.318193 env[1197]: 2024-07-02 07:45:25.303 [INFO][3457] k8s.go 387: Calico CNI using IPs: [192.168.88.130/32] ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.318193 env[1197]: 2024-07-02 07:45:25.303 [INFO][3457] dataplane_linux.go 68: Setting the host side veth name to caliea6cbd4704b ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.318193 env[1197]: 2024-07-02 07:45:25.306 [INFO][3457] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.318193 env[1197]: 2024-07-02 07:45:25.307 [INFO][3457] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zjz6j-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"cc8c263d-ad60-4d91-90ca-67fb1e4a4afa", ResourceVersion:"909", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 45, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6cc9df58f4", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a", Pod:"csi-node-driver-zjz6j", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliea6cbd4704b", MAC:"b6:ed:e0:f6:3d:1a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:25.318193 env[1197]: 2024-07-02 07:45:25.314 [INFO][3457] k8s.go 500: Wrote updated endpoint to datastore ContainerID="9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a" Namespace="calico-system" Pod="csi-node-driver-zjz6j" WorkloadEndpoint="localhost-k8s-csi--node--driver--zjz6j-eth0" Jul 2 07:45:25.321000 audit[3493]: NETFILTER_CFG table=filter:102 family=2 entries=34 op=nft_register_chain pid=3493 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:25.321000 audit[3493]: SYSCALL arch=c000003e syscall=46 success=yes exit=18640 a0=3 a1=7ffd25e29390 a2=0 a3=7ffd25e2937c items=0 ppid=3107 pid=3493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:25.321000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:25.328151 env[1197]: time="2024-07-02T07:45:25.328057327Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:45:25.328151 env[1197]: time="2024-07-02T07:45:25.328112063Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:45:25.328299 env[1197]: time="2024-07-02T07:45:25.328122382Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:45:25.328597 env[1197]: time="2024-07-02T07:45:25.328551230Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a pid=3500 runtime=io.containerd.runc.v2 Jul 2 07:45:25.338942 systemd[1]: Started cri-containerd-9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a.scope. Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit: BPF prog-id=142 op=LOAD Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3500 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:25.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313165396238643965333663616637386361623161663432396163 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3500 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:25.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313165396238643965333663616637386361623161663432396163 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit: BPF prog-id=143 op=LOAD Jul 2 07:45:25.348000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000092bb0 items=0 ppid=3500 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:25.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313165396238643965333663616637386361623161663432396163 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit: BPF prog-id=144 op=LOAD Jul 2 07:45:25.348000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000092bf8 items=0 ppid=3500 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:25.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313165396238643965333663616637386361623161663432396163 Jul 2 07:45:25.348000 audit: BPF prog-id=144 op=UNLOAD Jul 2 07:45:25.348000 audit: BPF prog-id=143 op=UNLOAD Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:25.348000 audit: BPF prog-id=145 op=LOAD Jul 2 07:45:25.348000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000093008 items=0 ppid=3500 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:25.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939313165396238643965333663616637386361623161663432396163 Jul 2 07:45:25.350871 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:45:25.359448 env[1197]: time="2024-07-02T07:45:25.359405900Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zjz6j,Uid:cc8c263d-ad60-4d91-90ca-67fb1e4a4afa,Namespace:calico-system,Attempt:1,} returns sandbox id \"9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a\"" Jul 2 07:45:25.525673 systemd[1]: run-netns-cni\x2dc84078bc\x2d0637\x2ddf7e\x2de026\x2d4a7a2ec26c9c.mount: Deactivated successfully. Jul 2 07:45:26.149205 env[1197]: time="2024-07-02T07:45:26.149166926Z" level=info msg="StopPodSandbox for \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\"" Jul 2 07:45:26.149336 env[1197]: time="2024-07-02T07:45:26.149240017Z" level=info msg="StopPodSandbox for \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\"" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.191 [INFO][3567] k8s.go 608: Cleaning up netns ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.191 [INFO][3567] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" iface="eth0" netns="/var/run/netns/cni-bee4960e-b45b-4293-0a95-7a33b2a8ed21" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.191 [INFO][3567] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" iface="eth0" netns="/var/run/netns/cni-bee4960e-b45b-4293-0a95-7a33b2a8ed21" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.192 [INFO][3567] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" iface="eth0" netns="/var/run/netns/cni-bee4960e-b45b-4293-0a95-7a33b2a8ed21" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.192 [INFO][3567] k8s.go 615: Releasing IP address(es) ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.192 [INFO][3567] utils.go 188: Calico CNI releasing IP address ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.213 [INFO][3582] ipam_plugin.go 411: Releasing address using handleID ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" HandleID="k8s-pod-network.6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Workload="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.213 [INFO][3582] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.213 [INFO][3582] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.217 [WARNING][3582] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" HandleID="k8s-pod-network.6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Workload="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.217 [INFO][3582] ipam_plugin.go 439: Releasing address using workloadID ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" HandleID="k8s-pod-network.6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Workload="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.218 [INFO][3582] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:26.221893 env[1197]: 2024-07-02 07:45:26.220 [INFO][3567] k8s.go 621: Teardown processing complete. ContainerID="6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8" Jul 2 07:45:26.223045 env[1197]: time="2024-07-02T07:45:26.222077808Z" level=info msg="TearDown network for sandbox \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\" successfully" Jul 2 07:45:26.223045 env[1197]: time="2024-07-02T07:45:26.222109269Z" level=info msg="StopPodSandbox for \"6c9df22452a239d4ea6dc30560f4801e661aac398c1e859ac595ecbb2f0dd4f8\" returns successfully" Jul 2 07:45:26.223045 env[1197]: time="2024-07-02T07:45:26.223036668Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-w962b,Uid:f581c30d-8a61-4a72-a521-421e1edd6000,Namespace:kube-system,Attempt:1,}" Jul 2 07:45:26.223216 kubelet[2039]: E0702 07:45:26.222391 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:26.223879 systemd[1]: run-netns-cni\x2dbee4960e\x2db45b\x2d4293\x2d0a95\x2d7a33b2a8ed21.mount: Deactivated successfully. Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.205 [INFO][3568] k8s.go 608: Cleaning up netns ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.206 [INFO][3568] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" iface="eth0" netns="/var/run/netns/cni-656f5e2d-726d-ca12-191f-2cc974a3635d" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.206 [INFO][3568] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" iface="eth0" netns="/var/run/netns/cni-656f5e2d-726d-ca12-191f-2cc974a3635d" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.206 [INFO][3568] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" iface="eth0" netns="/var/run/netns/cni-656f5e2d-726d-ca12-191f-2cc974a3635d" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.206 [INFO][3568] k8s.go 615: Releasing IP address(es) ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.206 [INFO][3568] utils.go 188: Calico CNI releasing IP address ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.233 [INFO][3589] ipam_plugin.go 411: Releasing address using handleID ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" HandleID="k8s-pod-network.575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Workload="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.233 [INFO][3589] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.234 [INFO][3589] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.241 [WARNING][3589] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" HandleID="k8s-pod-network.575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Workload="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.241 [INFO][3589] ipam_plugin.go 439: Releasing address using workloadID ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" HandleID="k8s-pod-network.575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Workload="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.243 [INFO][3589] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:26.246675 env[1197]: 2024-07-02 07:45:26.244 [INFO][3568] k8s.go 621: Teardown processing complete. ContainerID="575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979" Jul 2 07:45:26.248701 env[1197]: time="2024-07-02T07:45:26.246791490Z" level=info msg="TearDown network for sandbox \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\" successfully" Jul 2 07:45:26.248701 env[1197]: time="2024-07-02T07:45:26.246819173Z" level=info msg="StopPodSandbox for \"575b8fa86065348231e85884304d6368c3d9783b43a5a1aa252129955c7b8979\" returns successfully" Jul 2 07:45:26.248701 env[1197]: time="2024-07-02T07:45:26.247590904Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-6j7zm,Uid:6d555203-acb5-4fe8-86ac-2b58e32f4c78,Namespace:kube-system,Attempt:1,}" Jul 2 07:45:26.248277 systemd[1]: run-netns-cni\x2d656f5e2d\x2d726d\x2dca12\x2d191f\x2d2cc974a3635d.mount: Deactivated successfully. Jul 2 07:45:26.248829 kubelet[2039]: E0702 07:45:26.247059 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:26.336409 systemd-networkd[1022]: calie57d2ab50c1: Link UP Jul 2 07:45:26.339257 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:45:26.339299 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie57d2ab50c1: link becomes ready Jul 2 07:45:26.339510 systemd-networkd[1022]: calie57d2ab50c1: Gained carrier Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.270 [INFO][3599] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7db6d8ff4d--w962b-eth0 coredns-7db6d8ff4d- kube-system f581c30d-8a61-4a72-a521-421e1edd6000 922 0 2024-07-02 07:44:38 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7db6d8ff4d-w962b eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calie57d2ab50c1 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.270 [INFO][3599] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.299 [INFO][3627] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" HandleID="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Workload="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.310 [INFO][3627] ipam_plugin.go 264: Auto assigning IP ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" HandleID="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Workload="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00027de80), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7db6d8ff4d-w962b", "timestamp":"2024-07-02 07:45:26.299145483 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.310 [INFO][3627] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.310 [INFO][3627] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.310 [INFO][3627] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.313 [INFO][3627] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.317 [INFO][3627] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.322 [INFO][3627] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.324 [INFO][3627] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.325 [INFO][3627] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.326 [INFO][3627] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.327 [INFO][3627] ipam.go 1685: Creating new handle: k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.329 [INFO][3627] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.332 [INFO][3627] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.332 [INFO][3627] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" host="localhost" Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.332 [INFO][3627] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:26.350768 env[1197]: 2024-07-02 07:45:26.332 [INFO][3627] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" HandleID="k8s-pod-network.7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Workload="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.352314 env[1197]: 2024-07-02 07:45:26.334 [INFO][3599] k8s.go 386: Populated endpoint ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--w962b-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"f581c30d-8a61-4a72-a521-421e1edd6000", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 44, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7db6d8ff4d-w962b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie57d2ab50c1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:26.352314 env[1197]: 2024-07-02 07:45:26.334 [INFO][3599] k8s.go 387: Calico CNI using IPs: [192.168.88.131/32] ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.352314 env[1197]: 2024-07-02 07:45:26.334 [INFO][3599] dataplane_linux.go 68: Setting the host side veth name to calie57d2ab50c1 ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.352314 env[1197]: 2024-07-02 07:45:26.340 [INFO][3599] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.352314 env[1197]: 2024-07-02 07:45:26.340 [INFO][3599] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--w962b-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"f581c30d-8a61-4a72-a521-421e1edd6000", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 44, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e", Pod:"coredns-7db6d8ff4d-w962b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie57d2ab50c1", MAC:"56:52:b3:6f:29:4a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:26.352314 env[1197]: 2024-07-02 07:45:26.347 [INFO][3599] k8s.go 500: Wrote updated endpoint to datastore ContainerID="7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e" Namespace="kube-system" Pod="coredns-7db6d8ff4d-w962b" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--w962b-eth0" Jul 2 07:45:26.361000 audit[3653]: NETFILTER_CFG table=filter:103 family=2 entries=42 op=nft_register_chain pid=3653 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:26.361000 audit[3653]: SYSCALL arch=c000003e syscall=46 success=yes exit=21524 a0=3 a1=7ffca8c13430 a2=0 a3=7ffca8c1341c items=0 ppid=3107 pid=3653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.361000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:26.373262 systemd-networkd[1022]: calie62ac0dda47: Link UP Jul 2 07:45:26.375037 systemd-networkd[1022]: calie62ac0dda47: Gained carrier Jul 2 07:45:26.375561 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie62ac0dda47: link becomes ready Jul 2 07:45:26.386714 env[1197]: time="2024-07-02T07:45:26.385492454Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:45:26.386714 env[1197]: time="2024-07-02T07:45:26.385535918Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:45:26.386714 env[1197]: time="2024-07-02T07:45:26.385545286Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:45:26.386714 env[1197]: time="2024-07-02T07:45:26.385881274Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e pid=3667 runtime=io.containerd.runc.v2 Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.294 [INFO][3615] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0 coredns-7db6d8ff4d- kube-system 6d555203-acb5-4fe8-86ac-2b58e32f4c78 923 0 2024-07-02 07:44:38 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7db6d8ff4d-6j7zm eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calie62ac0dda47 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.294 [INFO][3615] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.317 [INFO][3636] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" HandleID="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Workload="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.324 [INFO][3636] ipam_plugin.go 264: Auto assigning IP ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" HandleID="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Workload="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00027d8d0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7db6d8ff4d-6j7zm", "timestamp":"2024-07-02 07:45:26.317344624 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.324 [INFO][3636] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.336 [INFO][3636] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.336 [INFO][3636] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.339 [INFO][3636] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.352 [INFO][3636] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.356 [INFO][3636] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.357 [INFO][3636] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.359 [INFO][3636] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.359 [INFO][3636] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.361 [INFO][3636] ipam.go 1685: Creating new handle: k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23 Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.363 [INFO][3636] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.367 [INFO][3636] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.367 [INFO][3636] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" host="localhost" Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.367 [INFO][3636] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:26.390401 env[1197]: 2024-07-02 07:45:26.367 [INFO][3636] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" HandleID="k8s-pod-network.9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Workload="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.391076 env[1197]: 2024-07-02 07:45:26.369 [INFO][3615] k8s.go 386: Populated endpoint ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"6d555203-acb5-4fe8-86ac-2b58e32f4c78", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 44, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7db6d8ff4d-6j7zm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie62ac0dda47", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:26.391076 env[1197]: 2024-07-02 07:45:26.370 [INFO][3615] k8s.go 387: Calico CNI using IPs: [192.168.88.132/32] ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.391076 env[1197]: 2024-07-02 07:45:26.371 [INFO][3615] dataplane_linux.go 68: Setting the host side veth name to calie62ac0dda47 ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.391076 env[1197]: 2024-07-02 07:45:26.375 [INFO][3615] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.391076 env[1197]: 2024-07-02 07:45:26.375 [INFO][3615] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"6d555203-acb5-4fe8-86ac-2b58e32f4c78", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 44, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23", Pod:"coredns-7db6d8ff4d-6j7zm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie62ac0dda47", MAC:"06:89:d9:26:e1:94", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:26.391076 env[1197]: 2024-07-02 07:45:26.387 [INFO][3615] k8s.go 500: Wrote updated endpoint to datastore ContainerID="9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23" Namespace="kube-system" Pod="coredns-7db6d8ff4d-6j7zm" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--6j7zm-eth0" Jul 2 07:45:26.396000 audit[3691]: NETFILTER_CFG table=filter:104 family=2 entries=38 op=nft_register_chain pid=3691 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:26.396000 audit[3691]: SYSCALL arch=c000003e syscall=46 success=yes exit=19408 a0=3 a1=7fff65d545f0 a2=0 a3=7fff65d545dc items=0 ppid=3107 pid=3691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.396000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:26.406421 env[1197]: time="2024-07-02T07:45:26.403557856Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:45:26.404757 systemd[1]: Started cri-containerd-7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e.scope. Jul 2 07:45:26.406776 env[1197]: time="2024-07-02T07:45:26.403599827Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:45:26.406776 env[1197]: time="2024-07-02T07:45:26.403609667Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:45:26.406776 env[1197]: time="2024-07-02T07:45:26.403712505Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23 pid=3708 runtime=io.containerd.runc.v2 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit: BPF prog-id=146 op=LOAD Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766623032313862303336393465643461633662333836353462653564 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766623032313862303336393465643461633662333836353462653564 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit: BPF prog-id=147 op=LOAD Jul 2 07:45:26.415000 audit[3680]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028b410 items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766623032313862303336393465643461633662333836353462653564 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit: BPF prog-id=148 op=LOAD Jul 2 07:45:26.415000 audit[3680]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028b458 items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766623032313862303336393465643461633662333836353462653564 Jul 2 07:45:26.415000 audit: BPF prog-id=148 op=UNLOAD Jul 2 07:45:26.415000 audit: BPF prog-id=147 op=UNLOAD Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { perfmon } for pid=3680 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit[3680]: AVC avc: denied { bpf } for pid=3680 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.415000 audit: BPF prog-id=149 op=LOAD Jul 2 07:45:26.415000 audit[3680]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028b868 items=0 ppid=3667 pid=3680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766623032313862303336393465643461633662333836353462653564 Jul 2 07:45:26.417998 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:45:26.420491 systemd[1]: Started cri-containerd-9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23.scope. Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit: BPF prog-id=150 op=LOAD Jul 2 07:45:26.434000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.434000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3708 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964316631313434383563656135616532353538386164663935323338 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3708 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964316631313434383563656135616532353538386164663935323338 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit: BPF prog-id=151 op=LOAD Jul 2 07:45:26.435000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002380b0 items=0 ppid=3708 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964316631313434383563656135616532353538386164663935323338 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit: BPF prog-id=152 op=LOAD Jul 2 07:45:26.435000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002380f8 items=0 ppid=3708 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964316631313434383563656135616532353538386164663935323338 Jul 2 07:45:26.435000 audit: BPF prog-id=152 op=UNLOAD Jul 2 07:45:26.435000 audit: BPF prog-id=151 op=UNLOAD Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.435000 audit: BPF prog-id=153 op=LOAD Jul 2 07:45:26.435000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000238508 items=0 ppid=3708 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964316631313434383563656135616532353538386164663935323338 Jul 2 07:45:26.437634 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:45:26.451976 env[1197]: time="2024-07-02T07:45:26.451946767Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-w962b,Uid:f581c30d-8a61-4a72-a521-421e1edd6000,Namespace:kube-system,Attempt:1,} returns sandbox id \"7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e\"" Jul 2 07:45:26.454301 kubelet[2039]: E0702 07:45:26.453851 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:26.456215 env[1197]: time="2024-07-02T07:45:26.456189344Z" level=info msg="CreateContainer within sandbox \"7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:45:26.466818 env[1197]: time="2024-07-02T07:45:26.466789299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-6j7zm,Uid:6d555203-acb5-4fe8-86ac-2b58e32f4c78,Namespace:kube-system,Attempt:1,} returns sandbox id \"9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23\"" Jul 2 07:45:26.467613 kubelet[2039]: E0702 07:45:26.467595 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:26.469387 env[1197]: time="2024-07-02T07:45:26.469359911Z" level=info msg="CreateContainer within sandbox \"9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:45:26.476590 env[1197]: time="2024-07-02T07:45:26.476549585Z" level=info msg="CreateContainer within sandbox \"7fb0218b03694ed4ac6b38654be5db842705fe27d25752600179237e8db8042e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"0452cf1e3412b8ed8b43385339f36a2449f4d87a55c75eb7ac58e065de61fc2f\"" Jul 2 07:45:26.478723 env[1197]: time="2024-07-02T07:45:26.478701438Z" level=info msg="StartContainer for \"0452cf1e3412b8ed8b43385339f36a2449f4d87a55c75eb7ac58e065de61fc2f\"" Jul 2 07:45:26.484699 env[1197]: time="2024-07-02T07:45:26.484675817Z" level=info msg="CreateContainer within sandbox \"9d1f114485cea5ae25588adf95238651f6ad6396b877a7de9393958c6c364f23\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"2927891216540d00dc1bceafd139cbee1066da71f1603a290f81696e76414f6b\"" Jul 2 07:45:26.485350 env[1197]: time="2024-07-02T07:45:26.485326292Z" level=info msg="StartContainer for \"2927891216540d00dc1bceafd139cbee1066da71f1603a290f81696e76414f6b\"" Jul 2 07:45:26.497316 systemd[1]: Started cri-containerd-0452cf1e3412b8ed8b43385339f36a2449f4d87a55c75eb7ac58e065de61fc2f.scope. Jul 2 07:45:26.503105 systemd[1]: Started cri-containerd-2927891216540d00dc1bceafd139cbee1066da71f1603a290f81696e76414f6b.scope. Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.505000 audit: BPF prog-id=154 op=LOAD Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3667 pid=3769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034353263663165333431326238656438623433333835333339663336 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3667 pid=3769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034353263663165333431326238656438623433333835333339663336 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit: BPF prog-id=155 op=LOAD Jul 2 07:45:26.506000 audit[3769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002d63f0 items=0 ppid=3667 pid=3769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034353263663165333431326238656438623433333835333339663336 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit: BPF prog-id=156 op=LOAD Jul 2 07:45:26.506000 audit[3769]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002d6438 items=0 ppid=3667 pid=3769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034353263663165333431326238656438623433333835333339663336 Jul 2 07:45:26.506000 audit: BPF prog-id=156 op=UNLOAD Jul 2 07:45:26.506000 audit: BPF prog-id=155 op=UNLOAD Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { perfmon } for pid=3769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit[3769]: AVC avc: denied { bpf } for pid=3769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.506000 audit: BPF prog-id=157 op=LOAD Jul 2 07:45:26.506000 audit[3769]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002d6848 items=0 ppid=3667 pid=3769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034353263663165333431326238656438623433333835333339663336 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.513000 audit: BPF prog-id=158 op=LOAD Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3708 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323738393132313635343064303064633162636561666431333963 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3708 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323738393132313635343064303064633162636561666431333963 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit: BPF prog-id=159 op=LOAD Jul 2 07:45:26.514000 audit[3782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002557d0 items=0 ppid=3708 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323738393132313635343064303064633162636561666431333963 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit: BPF prog-id=160 op=LOAD Jul 2 07:45:26.514000 audit[3782]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000255818 items=0 ppid=3708 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323738393132313635343064303064633162636561666431333963 Jul 2 07:45:26.514000 audit: BPF prog-id=160 op=UNLOAD Jul 2 07:45:26.514000 audit: BPF prog-id=159 op=UNLOAD Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { perfmon } for pid=3782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit[3782]: AVC avc: denied { bpf } for pid=3782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:26.514000 audit: BPF prog-id=161 op=LOAD Jul 2 07:45:26.514000 audit[3782]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000255c28 items=0 ppid=3708 pid=3782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:26.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323738393132313635343064303064633162636561666431333963 Jul 2 07:45:26.535391 env[1197]: time="2024-07-02T07:45:26.535357663Z" level=info msg="StartContainer for \"0452cf1e3412b8ed8b43385339f36a2449f4d87a55c75eb7ac58e065de61fc2f\" returns successfully" Jul 2 07:45:26.537614 env[1197]: time="2024-07-02T07:45:26.537561866Z" level=info msg="StartContainer for \"2927891216540d00dc1bceafd139cbee1066da71f1603a290f81696e76414f6b\" returns successfully" Jul 2 07:45:26.551574 systemd-networkd[1022]: calie37899ea351: Gained IPv6LL Jul 2 07:45:26.804675 systemd-networkd[1022]: caliea6cbd4704b: Gained IPv6LL Jul 2 07:45:27.297779 kernel: kauditd_printk_skb: 491 callbacks suppressed Jul 2 07:45:27.297892 kernel: audit: type=1130 audit(1719906327.291:1207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.39:22-10.0.0.1:52922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:27.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.39:22-10.0.0.1:52922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:27.292712 systemd[1]: Started sshd@16-10.0.0.39:22-10.0.0.1:52922.service. Jul 2 07:45:27.312443 kubelet[2039]: E0702 07:45:27.312331 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:27.315685 kubelet[2039]: E0702 07:45:27.315650 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:27.333514 kernel: audit: type=1101 audit(1719906327.324:1208): pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.333612 kernel: audit: type=1103 audit(1719906327.329:1209): pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.324000 audit[3842]: USER_ACCT pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.329000 audit[3842]: CRED_ACQ pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.331676 sshd[3842]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:27.333922 sshd[3842]: Accepted publickey for core from 10.0.0.1 port 52922 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:27.342430 kernel: audit: type=1006 audit(1719906327.329:1210): pid=3842 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 2 07:45:27.342576 kernel: audit: type=1300 audit(1719906327.329:1210): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee0a8d410 a2=3 a3=0 items=0 ppid=1 pid=3842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.329000 audit[3842]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee0a8d410 a2=3 a3=0 items=0 ppid=1 pid=3842 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.336410 systemd[1]: Started session-17.scope. Jul 2 07:45:27.336728 systemd-logind[1189]: New session 17 of user core. Jul 2 07:45:27.344057 kubelet[2039]: I0702 07:45:27.344018 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-6j7zm" podStartSLOduration=49.344000795 podStartE2EDuration="49.344000795s" podCreationTimestamp="2024-07-02 07:44:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:45:27.324448873 +0000 UTC m=+64.350901700" watchObservedRunningTime="2024-07-02 07:45:27.344000795 +0000 UTC m=+64.370453611" Jul 2 07:45:27.344697 kubelet[2039]: I0702 07:45:27.344671 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-w962b" podStartSLOduration=49.344664626 podStartE2EDuration="49.344664626s" podCreationTimestamp="2024-07-02 07:44:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:45:27.343715956 +0000 UTC m=+64.370168772" watchObservedRunningTime="2024-07-02 07:45:27.344664626 +0000 UTC m=+64.371117462" Jul 2 07:45:27.329000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:27.348393 kernel: audit: type=1327 audit(1719906327.329:1210): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:27.351000 audit[3845]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=3845 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:27.357486 kernel: audit: type=1325 audit(1719906327.351:1211): table=filter:105 family=2 entries=14 op=nft_register_rule pid=3845 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:27.365593 kernel: audit: type=1300 audit(1719906327.351:1211): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc76cd2f40 a2=0 a3=7ffc76cd2f2c items=0 ppid=2243 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.351000 audit[3845]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc76cd2f40 a2=0 a3=7ffc76cd2f2c items=0 ppid=2243 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:27.368492 kernel: audit: type=1327 audit(1719906327.351:1211): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:27.368545 kernel: audit: type=1105 audit(1719906327.353:1212): pid=3842 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.353000 audit[3842]: USER_START pid=3842 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.355000 audit[3846]: CRED_ACQ pid=3846 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.352000 audit[3845]: NETFILTER_CFG table=nat:106 family=2 entries=14 op=nft_register_rule pid=3845 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:27.352000 audit[3845]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc76cd2f40 a2=0 a3=0 items=0 ppid=2243 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.352000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:27.371000 audit[3848]: NETFILTER_CFG table=filter:107 family=2 entries=11 op=nft_register_rule pid=3848 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:27.371000 audit[3848]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffc5f346cb0 a2=0 a3=7ffc5f346c9c items=0 ppid=2243 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.371000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:27.373000 audit[3848]: NETFILTER_CFG table=nat:108 family=2 entries=35 op=nft_register_chain pid=3848 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:27.373000 audit[3848]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc5f346cb0 a2=0 a3=7ffc5f346c9c items=0 ppid=2243 pid=3848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.373000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:27.581401 env[1197]: time="2024-07-02T07:45:27.581249103Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:27.584326 env[1197]: time="2024-07-02T07:45:27.584266371Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:27.586366 env[1197]: time="2024-07-02T07:45:27.586333137Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:27.589509 env[1197]: time="2024-07-02T07:45:27.588951095Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:27.589686 env[1197]: time="2024-07-02T07:45:27.589623472Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783\"" Jul 2 07:45:27.593240 env[1197]: time="2024-07-02T07:45:27.593206151Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 07:45:27.601813 env[1197]: time="2024-07-02T07:45:27.601757960Z" level=info msg="CreateContainer within sandbox \"0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 07:45:27.621266 env[1197]: time="2024-07-02T07:45:27.621140906Z" level=info msg="CreateContainer within sandbox \"0f518364b775bad9471d8ee43176c0304f5d83ec270c1287909065d882f51dfc\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"7081fcd2700e21640556f8bbff5a96db5ebe43caffeb61f2d9ab0916ab3ab8a9\"" Jul 2 07:45:27.622179 env[1197]: time="2024-07-02T07:45:27.621956460Z" level=info msg="StartContainer for \"7081fcd2700e21640556f8bbff5a96db5ebe43caffeb61f2d9ab0916ab3ab8a9\"" Jul 2 07:45:27.638077 systemd[1]: Started cri-containerd-7081fcd2700e21640556f8bbff5a96db5ebe43caffeb61f2d9ab0916ab3ab8a9.scope. Jul 2 07:45:27.650738 sshd[3842]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit: BPF prog-id=162 op=LOAD Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3391 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383166636432373030653231363430353536663862626666356139 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3391 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383166636432373030653231363430353536663862626666356139 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit: BPF prog-id=163 op=LOAD Jul 2 07:45:27.650000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003e0b70 items=0 ppid=3391 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383166636432373030653231363430353536663862626666356139 Jul 2 07:45:27.650000 audit[3842]: USER_END pid=3842 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit: BPF prog-id=164 op=LOAD Jul 2 07:45:27.650000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003e0bb8 items=0 ppid=3391 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383166636432373030653231363430353536663862626666356139 Jul 2 07:45:27.650000 audit: BPF prog-id=164 op=UNLOAD Jul 2 07:45:27.650000 audit: BPF prog-id=163 op=UNLOAD Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.651000 audit[3842]: CRED_DISP pid=3842 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:27.650000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:27.650000 audit: BPF prog-id=165 op=LOAD Jul 2 07:45:27.650000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003e0fc8 items=0 ppid=3391 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:27.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730383166636432373030653231363430353536663862626666356139 Jul 2 07:45:27.654399 systemd[1]: sshd@16-10.0.0.39:22-10.0.0.1:52922.service: Deactivated successfully. Jul 2 07:45:27.655040 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 07:45:27.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.39:22-10.0.0.1:52922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:27.655858 systemd-logind[1189]: Session 17 logged out. Waiting for processes to exit. Jul 2 07:45:27.656510 systemd-logind[1189]: Removed session 17. Jul 2 07:45:27.677430 env[1197]: time="2024-07-02T07:45:27.677390302Z" level=info msg="StartContainer for \"7081fcd2700e21640556f8bbff5a96db5ebe43caffeb61f2d9ab0916ab3ab8a9\" returns successfully" Jul 2 07:45:27.701663 systemd-networkd[1022]: calie57d2ab50c1: Gained IPv6LL Jul 2 07:45:28.212618 systemd-networkd[1022]: calie62ac0dda47: Gained IPv6LL Jul 2 07:45:28.319142 kubelet[2039]: E0702 07:45:28.319109 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:28.319567 kubelet[2039]: E0702 07:45:28.319385 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:28.574000 audit[3904]: NETFILTER_CFG table=filter:109 family=2 entries=8 op=nft_register_rule pid=3904 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:28.574000 audit[3904]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffda292a5e0 a2=0 a3=7ffda292a5cc items=0 ppid=2243 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:28.574000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:28.579000 audit[3904]: NETFILTER_CFG table=nat:110 family=2 entries=56 op=nft_register_chain pid=3904 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:28.579000 audit[3904]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffda292a5e0 a2=0 a3=7ffda292a5cc items=0 ppid=2243 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:28.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:28.984110 env[1197]: time="2024-07-02T07:45:28.984047135Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:28.986292 env[1197]: time="2024-07-02T07:45:28.986255190Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:28.987825 env[1197]: time="2024-07-02T07:45:28.987797110Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:28.989274 env[1197]: time="2024-07-02T07:45:28.989239650Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:28.989745 env[1197]: time="2024-07-02T07:45:28.989714204Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de\"" Jul 2 07:45:28.991765 env[1197]: time="2024-07-02T07:45:28.991733536Z" level=info msg="CreateContainer within sandbox \"9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 07:45:29.006060 env[1197]: time="2024-07-02T07:45:29.006012653Z" level=info msg="CreateContainer within sandbox \"9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"32d1b8eb280014d0c8c4aeb3b2ffe6bc0d910d7fb1cbab2945e92f34a23b838b\"" Jul 2 07:45:29.006613 env[1197]: time="2024-07-02T07:45:29.006578333Z" level=info msg="StartContainer for \"32d1b8eb280014d0c8c4aeb3b2ffe6bc0d910d7fb1cbab2945e92f34a23b838b\"" Jul 2 07:45:29.028648 systemd[1]: Started cri-containerd-32d1b8eb280014d0c8c4aeb3b2ffe6bc0d910d7fb1cbab2945e92f34a23b838b.scope. Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f4f79921448 items=0 ppid=3500 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:29.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332643162386562323830303134643063386334616562336232666665 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit: BPF prog-id=166 op=LOAD Jul 2 07:45:29.039000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002368d8 items=0 ppid=3500 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:29.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332643162386562323830303134643063386334616562336232666665 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit: BPF prog-id=167 op=LOAD Jul 2 07:45:29.039000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000236928 items=0 ppid=3500 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:29.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332643162386562323830303134643063386334616562336232666665 Jul 2 07:45:29.039000 audit: BPF prog-id=167 op=UNLOAD Jul 2 07:45:29.039000 audit: BPF prog-id=166 op=UNLOAD Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:29.039000 audit: BPF prog-id=168 op=LOAD Jul 2 07:45:29.039000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002369b8 items=0 ppid=3500 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:29.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332643162386562323830303134643063386334616562336232666665 Jul 2 07:45:29.087965 env[1197]: time="2024-07-02T07:45:29.087897811Z" level=info msg="StartContainer for \"32d1b8eb280014d0c8c4aeb3b2ffe6bc0d910d7fb1cbab2945e92f34a23b838b\" returns successfully" Jul 2 07:45:29.089237 env[1197]: time="2024-07-02T07:45:29.089209257Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 07:45:29.323525 kubelet[2039]: E0702 07:45:29.322734 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:29.323525 kubelet[2039]: E0702 07:45:29.323304 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:29.368278 kubelet[2039]: I0702 07:45:29.367804 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7b95666599-qccms" podStartSLOduration=25.460831747 podStartE2EDuration="28.367782102s" podCreationTimestamp="2024-07-02 07:45:01 +0000 UTC" firstStartedPulling="2024-07-02 07:45:24.684178299 +0000 UTC m=+61.710631115" lastFinishedPulling="2024-07-02 07:45:27.591128654 +0000 UTC m=+64.617581470" observedRunningTime="2024-07-02 07:45:28.327021523 +0000 UTC m=+65.353474339" watchObservedRunningTime="2024-07-02 07:45:29.367782102 +0000 UTC m=+66.394234918" Jul 2 07:45:29.596863 systemd[1]: run-containerd-runc-k8s.io-32d1b8eb280014d0c8c4aeb3b2ffe6bc0d910d7fb1cbab2945e92f34a23b838b-runc.U5Wqsq.mount: Deactivated successfully. Jul 2 07:45:30.526668 env[1197]: time="2024-07-02T07:45:30.526610470Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:30.528621 env[1197]: time="2024-07-02T07:45:30.528566274Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:30.530014 env[1197]: time="2024-07-02T07:45:30.529969604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:30.531357 env[1197]: time="2024-07-02T07:45:30.531324842Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:30.531793 env[1197]: time="2024-07-02T07:45:30.531752445Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020\"" Jul 2 07:45:30.534124 env[1197]: time="2024-07-02T07:45:30.534086746Z" level=info msg="CreateContainer within sandbox \"9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 07:45:30.548286 env[1197]: time="2024-07-02T07:45:30.548259686Z" level=info msg="CreateContainer within sandbox \"9911e9b8d9e36caf78cab1af429acd18d2a2b06a984d8062301ccd961d44bb2a\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"bb0c5d3cd53b475d972f44f3aa1ca7399784b561a44b377f179ed2d21fc87a49\"" Jul 2 07:45:30.549744 env[1197]: time="2024-07-02T07:45:30.549711810Z" level=info msg="StartContainer for \"bb0c5d3cd53b475d972f44f3aa1ca7399784b561a44b377f179ed2d21fc87a49\"" Jul 2 07:45:30.567788 systemd[1]: Started cri-containerd-bb0c5d3cd53b475d972f44f3aa1ca7399784b561a44b377f179ed2d21fc87a49.scope. Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f3452cc8f68 items=0 ppid=3500 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:30.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262306335643363643533623437356439373266343466336161316361 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit: BPF prog-id=169 op=LOAD Jul 2 07:45:30.579000 audit[3970]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000393ed8 items=0 ppid=3500 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:30.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262306335643363643533623437356439373266343466336161316361 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.579000 audit: BPF prog-id=170 op=LOAD Jul 2 07:45:30.579000 audit[3970]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000393f28 items=0 ppid=3500 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:30.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262306335643363643533623437356439373266343466336161316361 Jul 2 07:45:30.580000 audit: BPF prog-id=170 op=UNLOAD Jul 2 07:45:30.580000 audit: BPF prog-id=169 op=UNLOAD Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { perfmon } for pid=3970 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit[3970]: AVC avc: denied { bpf } for pid=3970 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:30.580000 audit: BPF prog-id=171 op=LOAD Jul 2 07:45:30.580000 audit[3970]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000393fb8 items=0 ppid=3500 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:30.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262306335643363643533623437356439373266343466336161316361 Jul 2 07:45:30.595831 systemd[1]: run-containerd-runc-k8s.io-bb0c5d3cd53b475d972f44f3aa1ca7399784b561a44b377f179ed2d21fc87a49-runc.r2z7wW.mount: Deactivated successfully. Jul 2 07:45:30.653069 env[1197]: time="2024-07-02T07:45:30.653005450Z" level=info msg="StartContainer for \"bb0c5d3cd53b475d972f44f3aa1ca7399784b561a44b377f179ed2d21fc87a49\" returns successfully" Jul 2 07:45:31.218114 kubelet[2039]: I0702 07:45:31.218067 2039 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 07:45:31.218114 kubelet[2039]: I0702 07:45:31.218101 2039 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 07:45:31.338685 kubelet[2039]: I0702 07:45:31.338625 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-zjz6j" podStartSLOduration=25.166278591 podStartE2EDuration="30.338604499s" podCreationTimestamp="2024-07-02 07:45:01 +0000 UTC" firstStartedPulling="2024-07-02 07:45:25.360386073 +0000 UTC m=+62.386838889" lastFinishedPulling="2024-07-02 07:45:30.532711981 +0000 UTC m=+67.559164797" observedRunningTime="2024-07-02 07:45:31.338606263 +0000 UTC m=+68.365059099" watchObservedRunningTime="2024-07-02 07:45:31.338604499 +0000 UTC m=+68.365057315" Jul 2 07:45:31.480417 systemd[1]: run-containerd-runc-k8s.io-4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9-runc.NJZIxX.mount: Deactivated successfully. Jul 2 07:45:31.533842 kubelet[2039]: E0702 07:45:31.533550 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:32.654734 systemd[1]: Started sshd@17-10.0.0.39:22-10.0.0.1:38732.service. Jul 2 07:45:32.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.39:22-10.0.0.1:38732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:32.657489 kernel: kauditd_printk_skb: 162 callbacks suppressed Jul 2 07:45:32.657559 kernel: audit: type=1130 audit(1719906332.653:1252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.39:22-10.0.0.1:38732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:32.691000 audit[4027]: USER_ACCT pid=4027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.693352 sshd[4027]: Accepted publickey for core from 10.0.0.1 port 38732 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:32.696000 audit[4027]: CRED_ACQ pid=4027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.698832 sshd[4027]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:32.703101 kernel: audit: type=1101 audit(1719906332.691:1253): pid=4027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.703181 kernel: audit: type=1103 audit(1719906332.696:1254): pid=4027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.703212 kernel: audit: type=1006 audit(1719906332.696:1255): pid=4027 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 2 07:45:32.704984 systemd-logind[1189]: New session 18 of user core. Jul 2 07:45:32.705679 systemd[1]: Started session-18.scope. Jul 2 07:45:32.696000 audit[4027]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd5c0c410 a2=3 a3=0 items=0 ppid=1 pid=4027 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:32.710476 kernel: audit: type=1300 audit(1719906332.696:1255): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd5c0c410 a2=3 a3=0 items=0 ppid=1 pid=4027 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:32.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:32.704000 audit[4027]: USER_START pid=4027 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.716662 kernel: audit: type=1327 audit(1719906332.696:1255): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:32.716710 kernel: audit: type=1105 audit(1719906332.704:1256): pid=4027 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.716741 kernel: audit: type=1103 audit(1719906332.709:1257): pid=4029 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.709000 audit[4029]: CRED_ACQ pid=4029 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.808361 sshd[4027]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:32.807000 audit[4027]: USER_END pid=4027 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.810641 systemd[1]: sshd@17-10.0.0.39:22-10.0.0.1:38732.service: Deactivated successfully. Jul 2 07:45:32.811292 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 07:45:32.811901 systemd-logind[1189]: Session 18 logged out. Waiting for processes to exit. Jul 2 07:45:32.812757 systemd-logind[1189]: Removed session 18. Jul 2 07:45:32.807000 audit[4027]: CRED_DISP pid=4027 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.818532 kernel: audit: type=1106 audit(1719906332.807:1258): pid=4027 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.818612 kernel: audit: type=1104 audit(1719906332.807:1259): pid=4027 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:32.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.39:22-10.0.0.1:38732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:36.112000 audit[4053]: NETFILTER_CFG table=filter:111 family=2 entries=9 op=nft_register_rule pid=4053 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:36.112000 audit[4053]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffff9a8c3e0 a2=0 a3=7ffff9a8c3cc items=0 ppid=2243 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:36.112000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:36.122125 kubelet[2039]: I0702 07:45:36.122067 2039 topology_manager.go:215] "Topology Admit Handler" podUID="7e827413-0d94-42e6-ac8d-23cea9934dc1" podNamespace="calico-apiserver" podName="calico-apiserver-5cc996bd4d-wgp54" Jul 2 07:45:36.127265 systemd[1]: Created slice kubepods-besteffort-pod7e827413_0d94_42e6_ac8d_23cea9934dc1.slice. Jul 2 07:45:36.113000 audit[4053]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4053 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:36.113000 audit[4053]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffff9a8c3e0 a2=0 a3=7ffff9a8c3cc items=0 ppid=2243 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:36.113000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:36.144000 audit[4055]: NETFILTER_CFG table=filter:113 family=2 entries=10 op=nft_register_rule pid=4055 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:36.144000 audit[4055]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffd128a77c0 a2=0 a3=7ffd128a77ac items=0 ppid=2243 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:36.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:36.146000 audit[4055]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4055 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:36.146000 audit[4055]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd128a77c0 a2=0 a3=7ffd128a77ac items=0 ppid=2243 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:36.146000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:36.290285 kubelet[2039]: I0702 07:45:36.290239 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wsv5w\" (UniqueName: \"kubernetes.io/projected/7e827413-0d94-42e6-ac8d-23cea9934dc1-kube-api-access-wsv5w\") pod \"calico-apiserver-5cc996bd4d-wgp54\" (UID: \"7e827413-0d94-42e6-ac8d-23cea9934dc1\") " pod="calico-apiserver/calico-apiserver-5cc996bd4d-wgp54" Jul 2 07:45:36.290285 kubelet[2039]: I0702 07:45:36.290274 2039 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7e827413-0d94-42e6-ac8d-23cea9934dc1-calico-apiserver-certs\") pod \"calico-apiserver-5cc996bd4d-wgp54\" (UID: \"7e827413-0d94-42e6-ac8d-23cea9934dc1\") " pod="calico-apiserver/calico-apiserver-5cc996bd4d-wgp54" Jul 2 07:45:36.392139 kubelet[2039]: E0702 07:45:36.392037 2039 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Jul 2 07:45:36.392139 kubelet[2039]: E0702 07:45:36.392134 2039 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/7e827413-0d94-42e6-ac8d-23cea9934dc1-calico-apiserver-certs podName:7e827413-0d94-42e6-ac8d-23cea9934dc1 nodeName:}" failed. No retries permitted until 2024-07-02 07:45:36.892111727 +0000 UTC m=+73.918564543 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/7e827413-0d94-42e6-ac8d-23cea9934dc1-calico-apiserver-certs") pod "calico-apiserver-5cc996bd4d-wgp54" (UID: "7e827413-0d94-42e6-ac8d-23cea9934dc1") : secret "calico-apiserver-certs" not found Jul 2 07:45:36.893359 kubelet[2039]: E0702 07:45:36.893319 2039 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Jul 2 07:45:36.893544 kubelet[2039]: E0702 07:45:36.893399 2039 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/7e827413-0d94-42e6-ac8d-23cea9934dc1-calico-apiserver-certs podName:7e827413-0d94-42e6-ac8d-23cea9934dc1 nodeName:}" failed. No retries permitted until 2024-07-02 07:45:37.893383322 +0000 UTC m=+74.919836128 (durationBeforeRetry 1s). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/7e827413-0d94-42e6-ac8d-23cea9934dc1-calico-apiserver-certs") pod "calico-apiserver-5cc996bd4d-wgp54" (UID: "7e827413-0d94-42e6-ac8d-23cea9934dc1") : secret "calico-apiserver-certs" not found Jul 2 07:45:37.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.39:22-10.0.0.1:38740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:37.813332 systemd[1]: Started sshd@18-10.0.0.39:22-10.0.0.1:38740.service. Jul 2 07:45:37.819429 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 07:45:37.819594 kernel: audit: type=1130 audit(1719906337.813:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.39:22-10.0.0.1:38740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:37.848000 audit[4060]: USER_ACCT pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.849599 sshd[4060]: Accepted publickey for core from 10.0.0.1 port 38740 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:37.853000 audit[4060]: CRED_ACQ pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.854768 sshd[4060]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:37.859600 kernel: audit: type=1101 audit(1719906337.848:1266): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.859651 kernel: audit: type=1103 audit(1719906337.853:1267): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.859669 kernel: audit: type=1006 audit(1719906337.853:1268): pid=4060 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 2 07:45:37.858439 systemd-logind[1189]: New session 19 of user core. Jul 2 07:45:37.859286 systemd[1]: Started session-19.scope. Jul 2 07:45:37.861604 kernel: audit: type=1300 audit(1719906337.853:1268): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca79d1530 a2=3 a3=0 items=0 ppid=1 pid=4060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:37.853000 audit[4060]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca79d1530 a2=3 a3=0 items=0 ppid=1 pid=4060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:37.853000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:37.868311 kernel: audit: type=1327 audit(1719906337.853:1268): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:37.868463 kernel: audit: type=1105 audit(1719906337.864:1269): pid=4060 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.864000 audit[4060]: USER_START pid=4060 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.865000 audit[4062]: CRED_ACQ pid=4062 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.878168 kernel: audit: type=1103 audit(1719906337.865:1270): pid=4062 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.931945 env[1197]: time="2024-07-02T07:45:37.931886887Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc996bd4d-wgp54,Uid:7e827413-0d94-42e6-ac8d-23cea9934dc1,Namespace:calico-apiserver,Attempt:0,}" Jul 2 07:45:37.989667 sshd[4060]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:37.995142 systemd[1]: Started sshd@19-10.0.0.39:22-10.0.0.1:38750.service. Jul 2 07:45:37.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.39:22-10.0.0.1:38750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:37.995000 audit[4060]: USER_END pid=4060 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.998532 systemd[1]: sshd@18-10.0.0.39:22-10.0.0.1:38740.service: Deactivated successfully. Jul 2 07:45:37.999396 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 07:45:38.003654 kernel: audit: type=1130 audit(1719906337.994:1271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.39:22-10.0.0.1:38750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:38.003723 kernel: audit: type=1106 audit(1719906337.995:1272): pid=4060 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.005394 systemd-logind[1189]: Session 19 logged out. Waiting for processes to exit. Jul 2 07:45:37.995000 audit[4060]: CRED_DISP pid=4060 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:37.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.39:22-10.0.0.1:38740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:38.006580 systemd-logind[1189]: Removed session 19. Jul 2 07:45:38.038000 audit[4093]: USER_ACCT pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.039489 sshd[4093]: Accepted publickey for core from 10.0.0.1 port 38750 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:38.040000 audit[4093]: CRED_ACQ pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.040000 audit[4093]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0e281b30 a2=3 a3=0 items=0 ppid=1 pid=4093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.040000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:38.040963 sshd[4093]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:38.046771 systemd[1]: Started session-20.scope. Jul 2 07:45:38.049057 systemd-logind[1189]: New session 20 of user core. Jul 2 07:45:38.057000 audit[4093]: USER_START pid=4093 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.058569 systemd-networkd[1022]: caliefbad0c3248: Link UP Jul 2 07:45:38.063280 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:45:38.063739 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliefbad0c3248: link becomes ready Jul 2 07:45:38.064000 audit[4098]: CRED_ACQ pid=4098 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.063256 systemd-networkd[1022]: caliefbad0c3248: Gained carrier Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:37.981 [INFO][4072] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0 calico-apiserver-5cc996bd4d- calico-apiserver 7e827413-0d94-42e6-ac8d-23cea9934dc1 1080 0 2024-07-02 07:45:36 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cc996bd4d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5cc996bd4d-wgp54 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliefbad0c3248 [] []}} ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:37.982 [INFO][4072] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.015 [INFO][4087] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" HandleID="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Workload="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.024 [INFO][4087] ipam_plugin.go 264: Auto assigning IP ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" HandleID="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Workload="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ec270), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5cc996bd4d-wgp54", "timestamp":"2024-07-02 07:45:38.015924359 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.024 [INFO][4087] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.024 [INFO][4087] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.024 [INFO][4087] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.026 [INFO][4087] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.031 [INFO][4087] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.036 [INFO][4087] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.038 [INFO][4087] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.041 [INFO][4087] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.041 [INFO][4087] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.042 [INFO][4087] ipam.go 1685: Creating new handle: k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.046 [INFO][4087] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.053 [INFO][4087] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.053 [INFO][4087] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" host="localhost" Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.053 [INFO][4087] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:45:38.074983 env[1197]: 2024-07-02 07:45:38.054 [INFO][4087] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" HandleID="k8s-pod-network.0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Workload="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" Jul 2 07:45:38.132006 env[1197]: 2024-07-02 07:45:38.055 [INFO][4072] k8s.go 386: Populated endpoint ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0", GenerateName:"calico-apiserver-5cc996bd4d-", Namespace:"calico-apiserver", SelfLink:"", UID:"7e827413-0d94-42e6-ac8d-23cea9934dc1", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 45, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc996bd4d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5cc996bd4d-wgp54", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliefbad0c3248", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:38.132006 env[1197]: 2024-07-02 07:45:38.055 [INFO][4072] k8s.go 387: Calico CNI using IPs: [192.168.88.133/32] ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" Jul 2 07:45:38.132006 env[1197]: 2024-07-02 07:45:38.055 [INFO][4072] dataplane_linux.go 68: Setting the host side veth name to caliefbad0c3248 ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" Jul 2 07:45:38.132006 env[1197]: 2024-07-02 07:45:38.064 [INFO][4072] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" Jul 2 07:45:38.132006 env[1197]: 2024-07-02 07:45:38.064 [INFO][4072] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0", GenerateName:"calico-apiserver-5cc996bd4d-", Namespace:"calico-apiserver", SelfLink:"", UID:"7e827413-0d94-42e6-ac8d-23cea9934dc1", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 45, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cc996bd4d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c", Pod:"calico-apiserver-5cc996bd4d-wgp54", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliefbad0c3248", MAC:"66:d0:86:2d:f8:ee", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:45:38.132006 env[1197]: 2024-07-02 07:45:38.073 [INFO][4072] k8s.go 500: Wrote updated endpoint to datastore ContainerID="0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c" Namespace="calico-apiserver" Pod="calico-apiserver-5cc996bd4d-wgp54" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cc996bd4d--wgp54-eth0" Jul 2 07:45:38.143000 audit[4115]: NETFILTER_CFG table=filter:115 family=2 entries=55 op=nft_register_chain pid=4115 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:45:38.143000 audit[4115]: SYSCALL arch=c000003e syscall=46 success=yes exit=27464 a0=3 a1=7fffc39e8bf0 a2=0 a3=7fffc39e8bdc items=0 ppid=3107 pid=4115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.143000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:45:38.197733 env[1197]: time="2024-07-02T07:45:38.197627255Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:45:38.197733 env[1197]: time="2024-07-02T07:45:38.197680116Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:45:38.197733 env[1197]: time="2024-07-02T07:45:38.197692520Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:45:38.198195 env[1197]: time="2024-07-02T07:45:38.198122133Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c pid=4123 runtime=io.containerd.runc.v2 Jul 2 07:45:38.211057 systemd[1]: Started cri-containerd-0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c.scope. Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.221000 audit: BPF prog-id=172 op=LOAD Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=4123 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065386630306331366432626335613364643561323866393261396464 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=4123 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065386630306331366432626335613364643561323866393261396464 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.222000 audit: BPF prog-id=173 op=LOAD Jul 2 07:45:38.222000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000233a60 items=0 ppid=4123 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065386630306331366432626335613364643561323866393261396464 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.223000 audit: BPF prog-id=174 op=LOAD Jul 2 07:45:38.223000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000233aa8 items=0 ppid=4123 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065386630306331366432626335613364643561323866393261396464 Jul 2 07:45:38.223000 audit: BPF prog-id=174 op=UNLOAD Jul 2 07:45:38.224000 audit: BPF prog-id=173 op=UNLOAD Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { perfmon } for pid=4133 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit[4133]: AVC avc: denied { bpf } for pid=4133 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:38.224000 audit: BPF prog-id=175 op=LOAD Jul 2 07:45:38.224000 audit[4133]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c000233eb8 items=0 ppid=4123 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065386630306331366432626335613364643561323866393261396464 Jul 2 07:45:38.225946 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:45:38.251563 env[1197]: time="2024-07-02T07:45:38.251396369Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cc996bd4d-wgp54,Uid:7e827413-0d94-42e6-ac8d-23cea9934dc1,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c\"" Jul 2 07:45:38.253153 env[1197]: time="2024-07-02T07:45:38.253094300Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 07:45:38.413583 sshd[4093]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:38.417000 audit[4093]: USER_END pid=4093 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.418308 systemd[1]: Started sshd@20-10.0.0.39:22-10.0.0.1:38758.service. Jul 2 07:45:38.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.39:22-10.0.0.1:38758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:38.418000 audit[4093]: CRED_DISP pid=4093 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.420645 systemd[1]: sshd@19-10.0.0.39:22-10.0.0.1:38750.service: Deactivated successfully. Jul 2 07:45:38.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.39:22-10.0.0.1:38750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:38.421339 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 07:45:38.422217 systemd-logind[1189]: Session 20 logged out. Waiting for processes to exit. Jul 2 07:45:38.423017 systemd-logind[1189]: Removed session 20. Jul 2 07:45:38.453000 audit[4162]: USER_ACCT pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.454512 sshd[4162]: Accepted publickey for core from 10.0.0.1 port 38758 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:38.454000 audit[4162]: CRED_ACQ pid=4162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.454000 audit[4162]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc82054e0 a2=3 a3=0 items=0 ppid=1 pid=4162 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:38.454000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:38.455676 sshd[4162]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:38.459221 systemd-logind[1189]: New session 21 of user core. Jul 2 07:45:38.459972 systemd[1]: Started session-21.scope. Jul 2 07:45:38.465000 audit[4162]: USER_START pid=4162 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:38.466000 audit[4165]: CRED_ACQ pid=4165 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:39.220630 systemd-networkd[1022]: caliefbad0c3248: Gained IPv6LL Jul 2 07:45:39.943000 audit[4177]: NETFILTER_CFG table=filter:116 family=2 entries=22 op=nft_register_rule pid=4177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:39.943000 audit[4177]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffde23ab990 a2=0 a3=7ffde23ab97c items=0 ppid=2243 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:39.943000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:39.946817 sshd[4162]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:39.949330 systemd[1]: Started sshd@21-10.0.0.39:22-10.0.0.1:38770.service. Jul 2 07:45:39.948000 audit[4162]: USER_END pid=4162 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:39.948000 audit[4162]: CRED_DISP pid=4162 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:39.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.39:22-10.0.0.1:38770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:39.943000 audit[4177]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=4177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:39.943000 audit[4177]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffde23ab990 a2=0 a3=0 items=0 ppid=2243 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:39.943000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:39.956308 systemd[1]: sshd@20-10.0.0.39:22-10.0.0.1:38758.service: Deactivated successfully. Jul 2 07:45:39.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.39:22-10.0.0.1:38758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:39.957071 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 07:45:39.957909 systemd-logind[1189]: Session 21 logged out. Waiting for processes to exit. Jul 2 07:45:39.960166 systemd-logind[1189]: Removed session 21. Jul 2 07:45:39.966000 audit[4181]: NETFILTER_CFG table=filter:118 family=2 entries=34 op=nft_register_rule pid=4181 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:39.966000 audit[4181]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffcdb6ef820 a2=0 a3=7ffcdb6ef80c items=0 ppid=2243 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:39.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:39.970000 audit[4181]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=4181 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:39.970000 audit[4181]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcdb6ef820 a2=0 a3=0 items=0 ppid=2243 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:39.970000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:39.996000 audit[4179]: USER_ACCT pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:39.996945 sshd[4179]: Accepted publickey for core from 10.0.0.1 port 38770 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:39.997000 audit[4179]: CRED_ACQ pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:39.997000 audit[4179]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedde98d10 a2=3 a3=0 items=0 ppid=1 pid=4179 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:39.997000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:39.998460 sshd[4179]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:40.004760 systemd[1]: Started session-22.scope. Jul 2 07:45:40.008824 systemd-logind[1189]: New session 22 of user core. Jul 2 07:45:40.019000 audit[4179]: USER_START pid=4179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.021000 audit[4184]: CRED_ACQ pid=4184 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.451427 sshd[4179]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:40.451000 audit[4179]: USER_END pid=4179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.452000 audit[4179]: CRED_DISP pid=4179 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.454298 systemd[1]: sshd@21-10.0.0.39:22-10.0.0.1:38770.service: Deactivated successfully. Jul 2 07:45:40.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.39:22-10.0.0.1:38770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:40.454816 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 07:45:40.455733 systemd-logind[1189]: Session 22 logged out. Waiting for processes to exit. Jul 2 07:45:40.457030 systemd[1]: Started sshd@22-10.0.0.39:22-10.0.0.1:38784.service. Jul 2 07:45:40.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.39:22-10.0.0.1:38784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:40.457745 systemd-logind[1189]: Removed session 22. Jul 2 07:45:40.487000 audit[4196]: USER_ACCT pid=4196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.488581 sshd[4196]: Accepted publickey for core from 10.0.0.1 port 38784 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:40.489000 audit[4196]: CRED_ACQ pid=4196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.489000 audit[4196]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9c7e4d30 a2=3 a3=0 items=0 ppid=1 pid=4196 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:40.489000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:40.489964 sshd[4196]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:40.494532 systemd-logind[1189]: New session 23 of user core. Jul 2 07:45:40.494748 systemd[1]: Started session-23.scope. Jul 2 07:45:40.498000 audit[4196]: USER_START pid=4196 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.500000 audit[4198]: CRED_ACQ pid=4198 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.613212 sshd[4196]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:40.614000 audit[4196]: USER_END pid=4196 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.614000 audit[4196]: CRED_DISP pid=4196 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:40.617135 systemd[1]: sshd@22-10.0.0.39:22-10.0.0.1:38784.service: Deactivated successfully. Jul 2 07:45:40.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.39:22-10.0.0.1:38784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:40.617783 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 07:45:40.618893 systemd-logind[1189]: Session 23 logged out. Waiting for processes to exit. Jul 2 07:45:40.619739 systemd-logind[1189]: Removed session 23. Jul 2 07:45:41.373285 env[1197]: time="2024-07-02T07:45:41.373235040Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:41.375179 env[1197]: time="2024-07-02T07:45:41.375148428Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:41.376761 env[1197]: time="2024-07-02T07:45:41.376738688Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:41.378129 env[1197]: time="2024-07-02T07:45:41.378096714Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:45:41.378616 env[1197]: time="2024-07-02T07:45:41.378594866Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 07:45:41.380440 env[1197]: time="2024-07-02T07:45:41.380402371Z" level=info msg="CreateContainer within sandbox \"0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 07:45:41.395718 env[1197]: time="2024-07-02T07:45:41.395679779Z" level=info msg="CreateContainer within sandbox \"0e8f00c16d2bc5a3dd5a28f92a9ddfc2ed25ac8742e75be507a0f9959d6ab08c\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"78314db4003bdfd62451a5d61d7f1bbe66a7cb2232e969985530b60dd97817b7\"" Jul 2 07:45:41.396122 env[1197]: time="2024-07-02T07:45:41.396098490Z" level=info msg="StartContainer for \"78314db4003bdfd62451a5d61d7f1bbe66a7cb2232e969985530b60dd97817b7\"" Jul 2 07:45:41.419146 systemd[1]: run-containerd-runc-k8s.io-78314db4003bdfd62451a5d61d7f1bbe66a7cb2232e969985530b60dd97817b7-runc.0fiPjc.mount: Deactivated successfully. Jul 2 07:45:41.424406 systemd[1]: Started cri-containerd-78314db4003bdfd62451a5d61d7f1bbe66a7cb2232e969985530b60dd97817b7.scope. Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.433000 audit: BPF prog-id=176 op=LOAD Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4123 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:41.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333134646234303033626466643632343531613564363164376631 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4123 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:41.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333134646234303033626466643632343531613564363164376631 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.434000 audit: BPF prog-id=177 op=LOAD Jul 2 07:45:41.434000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c6010 items=0 ppid=4123 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:41.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333134646234303033626466643632343531613564363164376631 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.435000 audit: BPF prog-id=178 op=LOAD Jul 2 07:45:41.435000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c6058 items=0 ppid=4123 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:41.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333134646234303033626466643632343531613564363164376631 Jul 2 07:45:41.436000 audit: BPF prog-id=178 op=UNLOAD Jul 2 07:45:41.436000 audit: BPF prog-id=177 op=UNLOAD Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { perfmon } for pid=4218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit[4218]: AVC avc: denied { bpf } for pid=4218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:45:41.436000 audit: BPF prog-id=179 op=LOAD Jul 2 07:45:41.436000 audit[4218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c6468 items=0 ppid=4123 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:41.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738333134646234303033626466643632343531613564363164376631 Jul 2 07:45:41.460376 env[1197]: time="2024-07-02T07:45:41.460330930Z" level=info msg="StartContainer for \"78314db4003bdfd62451a5d61d7f1bbe66a7cb2232e969985530b60dd97817b7\" returns successfully" Jul 2 07:45:41.527000 audit[4251]: NETFILTER_CFG table=filter:120 family=2 entries=34 op=nft_register_rule pid=4251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:41.527000 audit[4251]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffc120c62a0 a2=0 a3=7ffc120c628c items=0 ppid=2243 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:41.527000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:41.528000 audit[4251]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:41.528000 audit[4251]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc120c62a0 a2=0 a3=0 items=0 ppid=2243 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:41.528000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:41.962000 audit[4228]: AVC avc: denied { watch } for pid=4228 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_07_45_37.4183777914/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c96,c590 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c96,c590 tclass=file permissive=0 Jul 2 07:45:41.962000 audit[4228]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c2e420 a2=fc6 a3=0 items=0 ppid=4123 pid=4228 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c96,c590 key=(null) Jul 2 07:45:41.962000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 07:45:42.399664 kubelet[2039]: I0702 07:45:42.399500 2039 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5cc996bd4d-wgp54" podStartSLOduration=3.27277458 podStartE2EDuration="6.399480561s" podCreationTimestamp="2024-07-02 07:45:36 +0000 UTC" firstStartedPulling="2024-07-02 07:45:38.252572432 +0000 UTC m=+75.279025248" lastFinishedPulling="2024-07-02 07:45:41.379278413 +0000 UTC m=+78.405731229" observedRunningTime="2024-07-02 07:45:42.398745646 +0000 UTC m=+79.425198482" watchObservedRunningTime="2024-07-02 07:45:42.399480561 +0000 UTC m=+79.425933397" Jul 2 07:45:42.428000 audit[4253]: NETFILTER_CFG table=filter:122 family=2 entries=33 op=nft_register_rule pid=4253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:42.428000 audit[4253]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffce2621e90 a2=0 a3=7ffce2621e7c items=0 ppid=2243 pid=4253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:42.428000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:42.429000 audit[4253]: NETFILTER_CFG table=nat:123 family=2 entries=27 op=nft_register_chain pid=4253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:42.429000 audit[4253]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffce2621e90 a2=0 a3=0 items=0 ppid=2243 pid=4253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:42.429000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:43.149485 kubelet[2039]: E0702 07:45:43.149424 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:43.439000 audit[4283]: NETFILTER_CFG table=filter:124 family=2 entries=32 op=nft_register_rule pid=4283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:43.440950 kernel: kauditd_printk_skb: 189 callbacks suppressed Jul 2 07:45:43.441015 kernel: audit: type=1325 audit(1719906343.439:1356): table=filter:124 family=2 entries=32 op=nft_register_rule pid=4283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:43.439000 audit[4283]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffca6118130 a2=0 a3=7ffca611811c items=0 ppid=2243 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:43.447806 kernel: audit: type=1300 audit(1719906343.439:1356): arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffca6118130 a2=0 a3=7ffca611811c items=0 ppid=2243 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:43.447854 kernel: audit: type=1327 audit(1719906343.439:1356): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:43.439000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:43.440000 audit[4283]: NETFILTER_CFG table=nat:125 family=2 entries=34 op=nft_register_chain pid=4283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:43.440000 audit[4283]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffca6118130 a2=0 a3=7ffca611811c items=0 ppid=2243 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:43.457641 kernel: audit: type=1325 audit(1719906343.440:1357): table=nat:125 family=2 entries=34 op=nft_register_chain pid=4283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:43.457683 kernel: audit: type=1300 audit(1719906343.440:1357): arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffca6118130 a2=0 a3=7ffca611811c items=0 ppid=2243 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:43.457703 kernel: audit: type=1327 audit(1719906343.440:1357): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:43.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:45.617854 systemd[1]: Started sshd@23-10.0.0.39:22-10.0.0.1:43416.service. Jul 2 07:45:45.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.39:22-10.0.0.1:43416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:45.622500 kernel: audit: type=1130 audit(1719906345.617:1358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.39:22-10.0.0.1:43416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:45.653000 audit[4310]: USER_ACCT pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.655779 sshd[4310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:45.654000 audit[4310]: CRED_ACQ pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.660057 sshd[4310]: Accepted publickey for core from 10.0.0.1 port 43416 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:45.664121 kernel: audit: type=1101 audit(1719906345.653:1359): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.664288 kernel: audit: type=1103 audit(1719906345.654:1360): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.666901 kernel: audit: type=1006 audit(1719906345.654:1361): pid=4310 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 07:45:45.654000 audit[4310]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff96c72de0 a2=3 a3=0 items=0 ppid=1 pid=4310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:45.654000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:45.669895 systemd-logind[1189]: New session 24 of user core. Jul 2 07:45:45.670634 systemd[1]: Started session-24.scope. Jul 2 07:45:45.675000 audit[4310]: USER_START pid=4310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.676000 audit[4312]: CRED_ACQ pid=4312 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.777342 sshd[4310]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:45.778000 audit[4310]: USER_END pid=4310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.778000 audit[4310]: CRED_DISP pid=4310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:45.779997 systemd-logind[1189]: Session 24 logged out. Waiting for processes to exit. Jul 2 07:45:45.780152 systemd[1]: sshd@23-10.0.0.39:22-10.0.0.1:43416.service: Deactivated successfully. Jul 2 07:45:45.780829 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 07:45:45.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.39:22-10.0.0.1:43416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:45.781980 systemd-logind[1189]: Removed session 24. Jul 2 07:45:46.148412 kubelet[2039]: E0702 07:45:46.148366 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:46.707000 audit[4323]: NETFILTER_CFG table=filter:126 family=2 entries=20 op=nft_register_rule pid=4323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:46.707000 audit[4323]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe3a6c0eb0 a2=0 a3=7ffe3a6c0e9c items=0 ppid=2243 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:46.707000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:46.709000 audit[4323]: NETFILTER_CFG table=nat:127 family=2 entries=106 op=nft_register_chain pid=4323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:45:46.709000 audit[4323]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffe3a6c0eb0 a2=0 a3=7ffe3a6c0e9c items=0 ppid=2243 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:46.709000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:45:50.148425 kubelet[2039]: E0702 07:45:50.148387 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:45:50.779860 systemd[1]: Started sshd@24-10.0.0.39:22-10.0.0.1:43420.service. Jul 2 07:45:50.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.39:22-10.0.0.1:43420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:50.781106 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 07:45:50.781175 kernel: audit: type=1130 audit(1719906350.778:1369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.39:22-10.0.0.1:43420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:50.813000 audit[4328]: USER_ACCT pid=4328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.814868 sshd[4328]: Accepted publickey for core from 10.0.0.1 port 43420 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:50.816979 sshd[4328]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:50.815000 audit[4328]: CRED_ACQ pid=4328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.820706 systemd-logind[1189]: New session 25 of user core. Jul 2 07:45:50.821742 systemd[1]: Started session-25.scope. Jul 2 07:45:50.823276 kernel: audit: type=1101 audit(1719906350.813:1370): pid=4328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.823344 kernel: audit: type=1103 audit(1719906350.815:1371): pid=4328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.823376 kernel: audit: type=1006 audit(1719906350.815:1372): pid=4328 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 2 07:45:50.825698 kernel: audit: type=1300 audit(1719906350.815:1372): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf1d27610 a2=3 a3=0 items=0 ppid=1 pid=4328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:50.815000 audit[4328]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf1d27610 a2=3 a3=0 items=0 ppid=1 pid=4328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:50.815000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:50.831036 kernel: audit: type=1327 audit(1719906350.815:1372): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:50.831073 kernel: audit: type=1105 audit(1719906350.825:1373): pid=4328 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.825000 audit[4328]: USER_START pid=4328 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.826000 audit[4330]: CRED_ACQ pid=4330 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.838711 kernel: audit: type=1103 audit(1719906350.826:1374): pid=4330 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.919931 sshd[4328]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:50.919000 audit[4328]: USER_END pid=4328 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.922224 systemd[1]: sshd@24-10.0.0.39:22-10.0.0.1:43420.service: Deactivated successfully. Jul 2 07:45:50.922947 systemd[1]: session-25.scope: Deactivated successfully. Jul 2 07:45:50.923671 systemd-logind[1189]: Session 25 logged out. Waiting for processes to exit. Jul 2 07:45:50.924322 systemd-logind[1189]: Removed session 25. Jul 2 07:45:50.919000 audit[4328]: CRED_DISP pid=4328 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.929177 kernel: audit: type=1106 audit(1719906350.919:1375): pid=4328 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.929233 kernel: audit: type=1104 audit(1719906350.919:1376): pid=4328 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:50.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.39:22-10.0.0.1:43420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:55.928767 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:45:55.928872 kernel: audit: type=1130 audit(1719906355.922:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.39:22-10.0.0.1:48700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:55.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.39:22-10.0.0.1:48700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:55.924212 systemd[1]: Started sshd@25-10.0.0.39:22-10.0.0.1:48700.service. Jul 2 07:45:55.952000 audit[4347]: USER_ACCT pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:55.954590 sshd[4347]: Accepted publickey for core from 10.0.0.1 port 48700 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:45:55.957350 sshd[4347]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:45:55.955000 audit[4347]: CRED_ACQ pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:55.960867 systemd-logind[1189]: New session 26 of user core. Jul 2 07:45:55.961808 systemd[1]: Started session-26.scope. Jul 2 07:45:55.963242 kernel: audit: type=1101 audit(1719906355.952:1379): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:55.963298 kernel: audit: type=1103 audit(1719906355.955:1380): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:55.963326 kernel: audit: type=1006 audit(1719906355.955:1381): pid=4347 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 2 07:45:55.955000 audit[4347]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfa0e6830 a2=3 a3=0 items=0 ppid=1 pid=4347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:55.970261 kernel: audit: type=1300 audit(1719906355.955:1381): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfa0e6830 a2=3 a3=0 items=0 ppid=1 pid=4347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:45:55.970299 kernel: audit: type=1327 audit(1719906355.955:1381): proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:55.955000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:45:55.971580 kernel: audit: type=1105 audit(1719906355.966:1382): pid=4347 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:55.966000 audit[4347]: USER_START pid=4347 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:55.967000 audit[4349]: CRED_ACQ pid=4349 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:55.979450 kernel: audit: type=1103 audit(1719906355.967:1383): pid=4349 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:56.058672 sshd[4347]: pam_unix(sshd:session): session closed for user core Jul 2 07:45:56.058000 audit[4347]: USER_END pid=4347 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:56.060742 systemd[1]: sshd@25-10.0.0.39:22-10.0.0.1:48700.service: Deactivated successfully. Jul 2 07:45:56.061568 systemd[1]: session-26.scope: Deactivated successfully. Jul 2 07:45:56.062165 systemd-logind[1189]: Session 26 logged out. Waiting for processes to exit. Jul 2 07:45:56.062847 systemd-logind[1189]: Removed session 26. Jul 2 07:45:56.058000 audit[4347]: CRED_DISP pid=4347 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:56.067883 kernel: audit: type=1106 audit(1719906356.058:1384): pid=4347 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:56.067943 kernel: audit: type=1104 audit(1719906356.058:1385): pid=4347 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:45:56.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.39:22-10.0.0.1:48700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:45:59.148961 kubelet[2039]: E0702 07:45:59.148933 2039 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:46:01.064787 systemd[1]: Started sshd@26-10.0.0.39:22-10.0.0.1:48710.service. Jul 2 07:46:01.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.39:22-10.0.0.1:48710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:01.066016 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:46:01.066067 kernel: audit: type=1130 audit(1719906361.063:1387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.39:22-10.0.0.1:48710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:01.094000 audit[4362]: USER_ACCT pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.095940 sshd[4362]: Accepted publickey for core from 10.0.0.1 port 48710 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:01.097152 sshd[4362]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:01.094000 audit[4362]: CRED_ACQ pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.100628 systemd-logind[1189]: New session 27 of user core. Jul 2 07:46:01.101315 systemd[1]: Started session-27.scope. Jul 2 07:46:01.103273 kernel: audit: type=1101 audit(1719906361.094:1388): pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.103324 kernel: audit: type=1103 audit(1719906361.094:1389): pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.103343 kernel: audit: type=1006 audit(1719906361.094:1390): pid=4362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 2 07:46:01.094000 audit[4362]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe6f6ea50 a2=3 a3=0 items=0 ppid=1 pid=4362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:01.109546 kernel: audit: type=1300 audit(1719906361.094:1390): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe6f6ea50 a2=3 a3=0 items=0 ppid=1 pid=4362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:01.109595 kernel: audit: type=1327 audit(1719906361.094:1390): proctitle=737368643A20636F7265205B707269765D Jul 2 07:46:01.094000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:46:01.104000 audit[4362]: USER_START pid=4362 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.115012 kernel: audit: type=1105 audit(1719906361.104:1391): pid=4362 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.115056 kernel: audit: type=1103 audit(1719906361.104:1392): pid=4364 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.104000 audit[4364]: CRED_ACQ pid=4364 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.203302 sshd[4362]: pam_unix(sshd:session): session closed for user core Jul 2 07:46:01.202000 audit[4362]: USER_END pid=4362 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.205725 systemd[1]: sshd@26-10.0.0.39:22-10.0.0.1:48710.service: Deactivated successfully. Jul 2 07:46:01.206649 systemd[1]: session-27.scope: Deactivated successfully. Jul 2 07:46:01.207288 systemd-logind[1189]: Session 27 logged out. Waiting for processes to exit. Jul 2 07:46:01.207941 systemd-logind[1189]: Removed session 27. Jul 2 07:46:01.202000 audit[4362]: CRED_DISP pid=4362 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.212537 kernel: audit: type=1106 audit(1719906361.202:1393): pid=4362 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.212656 kernel: audit: type=1104 audit(1719906361.202:1394): pid=4362 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:01.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.39:22-10.0.0.1:48710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:01.452596 systemd[1]: run-containerd-runc-k8s.io-4fd71473a66c95394a1f0c6d59b9fcf7b9d762a31e71df988e39c1712fc1c6d9-runc.Y5ekcz.mount: Deactivated successfully.