Dec 13 13:55:22.727614 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Dec 13 13:55:22.727636 kernel: Linux version 5.15.173-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Dec 13 12:58:58 -00 2024 Dec 13 13:55:22.727643 kernel: efi: EFI v2.70 by EDK II Dec 13 13:55:22.727649 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Dec 13 13:55:22.727654 kernel: random: crng init done Dec 13 13:55:22.727660 kernel: ACPI: Early table checksum verification disabled Dec 13 13:55:22.727666 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Dec 13 13:55:22.727673 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Dec 13 13:55:22.727679 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727684 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727689 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727700 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727706 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727711 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727720 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727726 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727732 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Dec 13 13:55:22.727737 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Dec 13 13:55:22.727743 kernel: NUMA: Failed to initialise from firmware Dec 13 13:55:22.727749 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Dec 13 13:55:22.727755 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Dec 13 13:55:22.727760 kernel: Zone ranges: Dec 13 13:55:22.727766 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Dec 13 13:55:22.727772 kernel: DMA32 empty Dec 13 13:55:22.727778 kernel: Normal empty Dec 13 13:55:22.727784 kernel: Movable zone start for each node Dec 13 13:55:22.727789 kernel: Early memory node ranges Dec 13 13:55:22.727796 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Dec 13 13:55:22.727801 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Dec 13 13:55:22.727807 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Dec 13 13:55:22.727813 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Dec 13 13:55:22.727819 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Dec 13 13:55:22.727824 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Dec 13 13:55:22.727830 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Dec 13 13:55:22.727835 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Dec 13 13:55:22.727842 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Dec 13 13:55:22.727848 kernel: psci: probing for conduit method from ACPI. Dec 13 13:55:22.727854 kernel: psci: PSCIv1.1 detected in firmware. Dec 13 13:55:22.727860 kernel: psci: Using standard PSCI v0.2 function IDs Dec 13 13:55:22.727866 kernel: psci: Trusted OS migration not required Dec 13 13:55:22.727879 kernel: psci: SMC Calling Convention v1.1 Dec 13 13:55:22.727886 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Dec 13 13:55:22.727893 kernel: ACPI: SRAT not present Dec 13 13:55:22.727899 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Dec 13 13:55:22.727906 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Dec 13 13:55:22.727912 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Dec 13 13:55:22.727919 kernel: Detected PIPT I-cache on CPU0 Dec 13 13:55:22.727925 kernel: CPU features: detected: GIC system register CPU interface Dec 13 13:55:22.727931 kernel: CPU features: detected: Hardware dirty bit management Dec 13 13:55:22.727937 kernel: CPU features: detected: Spectre-v4 Dec 13 13:55:22.727943 kernel: CPU features: detected: Spectre-BHB Dec 13 13:55:22.727950 kernel: CPU features: kernel page table isolation forced ON by KASLR Dec 13 13:55:22.727956 kernel: CPU features: detected: Kernel page table isolation (KPTI) Dec 13 13:55:22.727962 kernel: CPU features: detected: ARM erratum 1418040 Dec 13 13:55:22.727969 kernel: CPU features: detected: SSBS not fully self-synchronizing Dec 13 13:55:22.727975 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Dec 13 13:55:22.727981 kernel: Policy zone: DMA Dec 13 13:55:22.727988 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=5997a8cf94b1df1856dc785f0a7074604bbf4c21fdcca24a1996021471a77601 Dec 13 13:55:22.727995 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Dec 13 13:55:22.728001 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Dec 13 13:55:22.728007 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Dec 13 13:55:22.728017 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Dec 13 13:55:22.728026 kernel: Memory: 2457404K/2572288K available (9792K kernel code, 2092K rwdata, 7576K rodata, 36416K init, 777K bss, 114884K reserved, 0K cma-reserved) Dec 13 13:55:22.728033 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Dec 13 13:55:22.728039 kernel: trace event string verifier disabled Dec 13 13:55:22.728045 kernel: rcu: Preemptible hierarchical RCU implementation. Dec 13 13:55:22.728052 kernel: rcu: RCU event tracing is enabled. Dec 13 13:55:22.728058 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Dec 13 13:55:22.728065 kernel: Trampoline variant of Tasks RCU enabled. Dec 13 13:55:22.728071 kernel: Tracing variant of Tasks RCU enabled. Dec 13 13:55:22.728077 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Dec 13 13:55:22.728083 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Dec 13 13:55:22.728089 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Dec 13 13:55:22.728097 kernel: GICv3: 256 SPIs implemented Dec 13 13:55:22.728103 kernel: GICv3: 0 Extended SPIs implemented Dec 13 13:55:22.728109 kernel: GICv3: Distributor has no Range Selector support Dec 13 13:55:22.728115 kernel: Root IRQ handler: gic_handle_irq Dec 13 13:55:22.728122 kernel: GICv3: 16 PPIs implemented Dec 13 13:55:22.728128 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Dec 13 13:55:22.728134 kernel: ACPI: SRAT not present Dec 13 13:55:22.728140 kernel: ITS [mem 0x08080000-0x0809ffff] Dec 13 13:55:22.728146 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Dec 13 13:55:22.728152 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Dec 13 13:55:22.728158 kernel: GICv3: using LPI property table @0x00000000400d0000 Dec 13 13:55:22.728164 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Dec 13 13:55:22.728172 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Dec 13 13:55:22.728179 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Dec 13 13:55:22.728185 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Dec 13 13:55:22.728192 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Dec 13 13:55:22.728198 kernel: arm-pv: using stolen time PV Dec 13 13:55:22.728205 kernel: Console: colour dummy device 80x25 Dec 13 13:55:22.728211 kernel: ACPI: Core revision 20210730 Dec 13 13:55:22.728217 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Dec 13 13:55:22.728224 kernel: pid_max: default: 32768 minimum: 301 Dec 13 13:55:22.728230 kernel: LSM: Security Framework initializing Dec 13 13:55:22.728237 kernel: SELinux: Initializing. Dec 13 13:55:22.728244 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Dec 13 13:55:22.728251 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Dec 13 13:55:22.728257 kernel: rcu: Hierarchical SRCU implementation. Dec 13 13:55:22.728263 kernel: Platform MSI: ITS@0x8080000 domain created Dec 13 13:55:22.728269 kernel: PCI/MSI: ITS@0x8080000 domain created Dec 13 13:55:22.728275 kernel: Remapping and enabling EFI services. Dec 13 13:55:22.728282 kernel: smp: Bringing up secondary CPUs ... Dec 13 13:55:22.728288 kernel: Detected PIPT I-cache on CPU1 Dec 13 13:55:22.728296 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Dec 13 13:55:22.728302 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Dec 13 13:55:22.728309 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Dec 13 13:55:22.728315 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Dec 13 13:55:22.728321 kernel: Detected PIPT I-cache on CPU2 Dec 13 13:55:22.728328 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Dec 13 13:55:22.728335 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Dec 13 13:55:22.728348 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Dec 13 13:55:22.728407 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Dec 13 13:55:22.728415 kernel: Detected PIPT I-cache on CPU3 Dec 13 13:55:22.728423 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Dec 13 13:55:22.728430 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Dec 13 13:55:22.728436 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Dec 13 13:55:22.728442 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Dec 13 13:55:22.728452 kernel: smp: Brought up 1 node, 4 CPUs Dec 13 13:55:22.728460 kernel: SMP: Total of 4 processors activated. Dec 13 13:55:22.728467 kernel: CPU features: detected: 32-bit EL0 Support Dec 13 13:55:22.728473 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Dec 13 13:55:22.728480 kernel: CPU features: detected: Common not Private translations Dec 13 13:55:22.728486 kernel: CPU features: detected: CRC32 instructions Dec 13 13:55:22.728493 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Dec 13 13:55:22.728499 kernel: CPU features: detected: LSE atomic instructions Dec 13 13:55:22.728507 kernel: CPU features: detected: Privileged Access Never Dec 13 13:55:22.728514 kernel: CPU features: detected: RAS Extension Support Dec 13 13:55:22.728520 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Dec 13 13:55:22.728527 kernel: CPU: All CPU(s) started at EL1 Dec 13 13:55:22.728533 kernel: alternatives: patching kernel code Dec 13 13:55:22.728541 kernel: devtmpfs: initialized Dec 13 13:55:22.728548 kernel: KASLR enabled Dec 13 13:55:22.728555 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Dec 13 13:55:22.728561 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Dec 13 13:55:22.728568 kernel: pinctrl core: initialized pinctrl subsystem Dec 13 13:55:22.728574 kernel: SMBIOS 3.0.0 present. Dec 13 13:55:22.728581 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Dec 13 13:55:22.728587 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Dec 13 13:55:22.728594 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Dec 13 13:55:22.728602 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Dec 13 13:55:22.728609 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Dec 13 13:55:22.728616 kernel: audit: initializing netlink subsys (disabled) Dec 13 13:55:22.728622 kernel: audit: type=2000 audit(0.032:1): state=initialized audit_enabled=0 res=1 Dec 13 13:55:22.728629 kernel: thermal_sys: Registered thermal governor 'step_wise' Dec 13 13:55:22.728635 kernel: cpuidle: using governor menu Dec 13 13:55:22.728642 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Dec 13 13:55:22.728648 kernel: ASID allocator initialised with 32768 entries Dec 13 13:55:22.728655 kernel: ACPI: bus type PCI registered Dec 13 13:55:22.728663 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Dec 13 13:55:22.728669 kernel: Serial: AMBA PL011 UART driver Dec 13 13:55:22.728676 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Dec 13 13:55:22.728682 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Dec 13 13:55:22.728689 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Dec 13 13:55:22.728699 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Dec 13 13:55:22.728706 kernel: cryptd: max_cpu_qlen set to 1000 Dec 13 13:55:22.728713 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Dec 13 13:55:22.728719 kernel: ACPI: Added _OSI(Module Device) Dec 13 13:55:22.728727 kernel: ACPI: Added _OSI(Processor Device) Dec 13 13:55:22.728734 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Dec 13 13:55:22.728740 kernel: ACPI: Added _OSI(Processor Aggregator Device) Dec 13 13:55:22.728747 kernel: ACPI: Added _OSI(Linux-Dell-Video) Dec 13 13:55:22.728754 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Dec 13 13:55:22.728760 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Dec 13 13:55:22.728767 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Dec 13 13:55:22.728773 kernel: ACPI: Interpreter enabled Dec 13 13:55:22.728780 kernel: ACPI: Using GIC for interrupt routing Dec 13 13:55:22.728787 kernel: ACPI: MCFG table detected, 1 entries Dec 13 13:55:22.728794 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Dec 13 13:55:22.728801 kernel: printk: console [ttyAMA0] enabled Dec 13 13:55:22.728807 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Dec 13 13:55:22.728931 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Dec 13 13:55:22.728995 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Dec 13 13:55:22.729054 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Dec 13 13:55:22.729112 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Dec 13 13:55:22.729167 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Dec 13 13:55:22.729176 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Dec 13 13:55:22.729183 kernel: PCI host bridge to bus 0000:00 Dec 13 13:55:22.729246 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Dec 13 13:55:22.729298 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Dec 13 13:55:22.729379 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Dec 13 13:55:22.729440 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Dec 13 13:55:22.729519 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Dec 13 13:55:22.729590 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Dec 13 13:55:22.729649 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Dec 13 13:55:22.729715 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Dec 13 13:55:22.729773 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Dec 13 13:55:22.729831 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Dec 13 13:55:22.729891 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Dec 13 13:55:22.729947 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Dec 13 13:55:22.729998 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Dec 13 13:55:22.730049 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Dec 13 13:55:22.730100 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Dec 13 13:55:22.730109 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Dec 13 13:55:22.730116 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Dec 13 13:55:22.730123 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Dec 13 13:55:22.730131 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Dec 13 13:55:22.730138 kernel: iommu: Default domain type: Translated Dec 13 13:55:22.730145 kernel: iommu: DMA domain TLB invalidation policy: strict mode Dec 13 13:55:22.730151 kernel: vgaarb: loaded Dec 13 13:55:22.730158 kernel: pps_core: LinuxPPS API ver. 1 registered Dec 13 13:55:22.730164 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Dec 13 13:55:22.730171 kernel: PTP clock support registered Dec 13 13:55:22.730178 kernel: Registered efivars operations Dec 13 13:55:22.730184 kernel: clocksource: Switched to clocksource arch_sys_counter Dec 13 13:55:22.730192 kernel: VFS: Disk quotas dquot_6.6.0 Dec 13 13:55:22.730198 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Dec 13 13:55:22.730205 kernel: pnp: PnP ACPI init Dec 13 13:55:22.730267 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Dec 13 13:55:22.730276 kernel: pnp: PnP ACPI: found 1 devices Dec 13 13:55:22.730283 kernel: NET: Registered PF_INET protocol family Dec 13 13:55:22.730290 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Dec 13 13:55:22.730296 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Dec 13 13:55:22.730305 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Dec 13 13:55:22.730311 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Dec 13 13:55:22.730318 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Dec 13 13:55:22.730325 kernel: TCP: Hash tables configured (established 32768 bind 32768) Dec 13 13:55:22.730331 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Dec 13 13:55:22.730338 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Dec 13 13:55:22.730352 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Dec 13 13:55:22.730370 kernel: PCI: CLS 0 bytes, default 64 Dec 13 13:55:22.730378 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Dec 13 13:55:22.730386 kernel: kvm [1]: HYP mode not available Dec 13 13:55:22.730393 kernel: Initialise system trusted keyrings Dec 13 13:55:22.730399 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Dec 13 13:55:22.730406 kernel: Key type asymmetric registered Dec 13 13:55:22.730412 kernel: Asymmetric key parser 'x509' registered Dec 13 13:55:22.730419 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Dec 13 13:55:22.730426 kernel: io scheduler mq-deadline registered Dec 13 13:55:22.730432 kernel: io scheduler kyber registered Dec 13 13:55:22.730439 kernel: io scheduler bfq registered Dec 13 13:55:22.730447 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Dec 13 13:55:22.730454 kernel: ACPI: button: Power Button [PWRB] Dec 13 13:55:22.730461 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Dec 13 13:55:22.730529 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Dec 13 13:55:22.730538 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Dec 13 13:55:22.730545 kernel: thunder_xcv, ver 1.0 Dec 13 13:55:22.730551 kernel: thunder_bgx, ver 1.0 Dec 13 13:55:22.730558 kernel: nicpf, ver 1.0 Dec 13 13:55:22.730564 kernel: nicvf, ver 1.0 Dec 13 13:55:22.730635 kernel: rtc-efi rtc-efi.0: registered as rtc0 Dec 13 13:55:22.730691 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-12-13T13:55:22 UTC (1734098122) Dec 13 13:55:22.730699 kernel: hid: raw HID events driver (C) Jiri Kosina Dec 13 13:55:22.730706 kernel: NET: Registered PF_INET6 protocol family Dec 13 13:55:22.730713 kernel: Segment Routing with IPv6 Dec 13 13:55:22.730719 kernel: In-situ OAM (IOAM) with IPv6 Dec 13 13:55:22.730726 kernel: NET: Registered PF_PACKET protocol family Dec 13 13:55:22.730732 kernel: Key type dns_resolver registered Dec 13 13:55:22.730741 kernel: registered taskstats version 1 Dec 13 13:55:22.730747 kernel: Loading compiled-in X.509 certificates Dec 13 13:55:22.730754 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.173-flatcar: e011ba9949ade5a6d03f7a5e28171f7f59e70f8a' Dec 13 13:55:22.730761 kernel: Key type .fscrypt registered Dec 13 13:55:22.730768 kernel: Key type fscrypt-provisioning registered Dec 13 13:55:22.730775 kernel: ima: No TPM chip found, activating TPM-bypass! Dec 13 13:55:22.730781 kernel: ima: Allocated hash algorithm: sha1 Dec 13 13:55:22.730788 kernel: ima: No architecture policies found Dec 13 13:55:22.730794 kernel: clk: Disabling unused clocks Dec 13 13:55:22.730802 kernel: Freeing unused kernel memory: 36416K Dec 13 13:55:22.730809 kernel: Run /init as init process Dec 13 13:55:22.730815 kernel: with arguments: Dec 13 13:55:22.730822 kernel: /init Dec 13 13:55:22.730828 kernel: with environment: Dec 13 13:55:22.730835 kernel: HOME=/ Dec 13 13:55:22.730841 kernel: TERM=linux Dec 13 13:55:22.730847 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Dec 13 13:55:22.730856 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Dec 13 13:55:22.730866 systemd[1]: Detected virtualization kvm. Dec 13 13:55:22.730873 systemd[1]: Detected architecture arm64. Dec 13 13:55:22.730880 systemd[1]: Running in initrd. Dec 13 13:55:22.730887 systemd[1]: No hostname configured, using default hostname. Dec 13 13:55:22.730894 systemd[1]: Hostname set to . Dec 13 13:55:22.730902 systemd[1]: Initializing machine ID from VM UUID. Dec 13 13:55:22.730909 systemd[1]: Queued start job for default target initrd.target. Dec 13 13:55:22.730917 systemd[1]: Started systemd-ask-password-console.path. Dec 13 13:55:22.730924 systemd[1]: Reached target cryptsetup.target. Dec 13 13:55:22.730931 systemd[1]: Reached target paths.target. Dec 13 13:55:22.730938 systemd[1]: Reached target slices.target. Dec 13 13:55:22.730945 systemd[1]: Reached target swap.target. Dec 13 13:55:22.730951 systemd[1]: Reached target timers.target. Dec 13 13:55:22.730959 systemd[1]: Listening on iscsid.socket. Dec 13 13:55:22.730967 systemd[1]: Listening on iscsiuio.socket. Dec 13 13:55:22.730974 systemd[1]: Listening on systemd-journald-audit.socket. Dec 13 13:55:22.730981 systemd[1]: Listening on systemd-journald-dev-log.socket. Dec 13 13:55:22.730988 systemd[1]: Listening on systemd-journald.socket. Dec 13 13:55:22.730995 systemd[1]: Listening on systemd-networkd.socket. Dec 13 13:55:22.731002 systemd[1]: Listening on systemd-udevd-control.socket. Dec 13 13:55:22.731010 systemd[1]: Listening on systemd-udevd-kernel.socket. Dec 13 13:55:22.731016 systemd[1]: Reached target sockets.target. Dec 13 13:55:22.731023 systemd[1]: Starting kmod-static-nodes.service... Dec 13 13:55:22.731031 systemd[1]: Finished network-cleanup.service. Dec 13 13:55:22.731039 systemd[1]: Starting systemd-fsck-usr.service... Dec 13 13:55:22.731046 systemd[1]: Starting systemd-journald.service... Dec 13 13:55:22.731053 systemd[1]: Starting systemd-modules-load.service... Dec 13 13:55:22.731060 systemd[1]: Starting systemd-resolved.service... Dec 13 13:55:22.731067 systemd[1]: Starting systemd-vconsole-setup.service... Dec 13 13:55:22.731074 systemd[1]: Finished kmod-static-nodes.service. Dec 13 13:55:22.731081 systemd[1]: Finished systemd-fsck-usr.service. Dec 13 13:55:22.731088 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Dec 13 13:55:22.731096 systemd[1]: Finished systemd-vconsole-setup.service. Dec 13 13:55:22.731103 systemd[1]: Starting dracut-cmdline-ask.service... Dec 13 13:55:22.731114 systemd-journald[289]: Journal started Dec 13 13:55:22.731156 systemd-journald[289]: Runtime Journal (/run/log/journal/12c45069393445deba74bd0aedaae58f) is 6.0M, max 48.7M, 42.6M free. Dec 13 13:55:22.724079 systemd-modules-load[290]: Inserted module 'overlay' Dec 13 13:55:22.736444 systemd[1]: Started systemd-journald.service. Dec 13 13:55:22.736465 kernel: audit: type=1130 audit(1734098122.733:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.739267 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Dec 13 13:55:22.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.744378 kernel: audit: type=1130 audit(1734098122.739:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.744412 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Dec 13 13:55:22.746745 systemd[1]: Finished dracut-cmdline-ask.service. Dec 13 13:55:22.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.748196 systemd[1]: Starting dracut-cmdline.service... Dec 13 13:55:22.752076 kernel: audit: type=1130 audit(1734098122.746:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.752104 kernel: Bridge firewalling registered Dec 13 13:55:22.752096 systemd-modules-load[290]: Inserted module 'br_netfilter' Dec 13 13:55:22.757185 systemd-resolved[291]: Positive Trust Anchors: Dec 13 13:55:22.757203 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Dec 13 13:55:22.757229 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Dec 13 13:55:22.763140 dracut-cmdline[310]: dracut-dracut-053 Dec 13 13:55:22.761456 systemd-resolved[291]: Defaulting to hostname 'linux'. Dec 13 13:55:22.768565 kernel: SCSI subsystem initialized Dec 13 13:55:22.768587 kernel: audit: type=1130 audit(1734098122.763:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.768638 dracut-cmdline[310]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=5997a8cf94b1df1856dc785f0a7074604bbf4c21fdcca24a1996021471a77601 Dec 13 13:55:22.762275 systemd[1]: Started systemd-resolved.service. Dec 13 13:55:22.763808 systemd[1]: Reached target nss-lookup.target. Dec 13 13:55:22.776776 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Dec 13 13:55:22.776797 kernel: device-mapper: uevent: version 1.0.3 Dec 13 13:55:22.776806 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Dec 13 13:55:22.778590 systemd-modules-load[290]: Inserted module 'dm_multipath' Dec 13 13:55:22.779402 systemd[1]: Finished systemd-modules-load.service. Dec 13 13:55:22.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.780788 systemd[1]: Starting systemd-sysctl.service... Dec 13 13:55:22.783827 kernel: audit: type=1130 audit(1734098122.779:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.789514 systemd[1]: Finished systemd-sysctl.service. Dec 13 13:55:22.794201 kernel: audit: type=1130 audit(1734098122.789:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.834389 kernel: Loading iSCSI transport class v2.0-870. Dec 13 13:55:22.846386 kernel: iscsi: registered transport (tcp) Dec 13 13:55:22.863386 kernel: iscsi: registered transport (qla4xxx) Dec 13 13:55:22.863417 kernel: QLogic iSCSI HBA Driver Dec 13 13:55:22.897849 systemd[1]: Finished dracut-cmdline.service. Dec 13 13:55:22.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.901384 kernel: audit: type=1130 audit(1734098122.898:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:22.899412 systemd[1]: Starting dracut-pre-udev.service... Dec 13 13:55:22.945388 kernel: raid6: neonx8 gen() 12344 MB/s Dec 13 13:55:22.962377 kernel: raid6: neonx8 xor() 10827 MB/s Dec 13 13:55:22.980391 kernel: raid6: neonx4 gen() 10836 MB/s Dec 13 13:55:22.997387 kernel: raid6: neonx4 xor() 11245 MB/s Dec 13 13:55:23.014393 kernel: raid6: neonx2 gen() 12533 MB/s Dec 13 13:55:23.031390 kernel: raid6: neonx2 xor() 10440 MB/s Dec 13 13:55:23.048378 kernel: raid6: neonx1 gen() 10529 MB/s Dec 13 13:55:23.065383 kernel: raid6: neonx1 xor() 8781 MB/s Dec 13 13:55:23.082397 kernel: raid6: int64x8 gen() 6256 MB/s Dec 13 13:55:23.099396 kernel: raid6: int64x8 xor() 3540 MB/s Dec 13 13:55:23.116405 kernel: raid6: int64x4 gen() 7205 MB/s Dec 13 13:55:23.133401 kernel: raid6: int64x4 xor() 3853 MB/s Dec 13 13:55:23.150412 kernel: raid6: int64x2 gen() 6139 MB/s Dec 13 13:55:23.167396 kernel: raid6: int64x2 xor() 3320 MB/s Dec 13 13:55:23.184391 kernel: raid6: int64x1 gen() 5041 MB/s Dec 13 13:55:23.201481 kernel: raid6: int64x1 xor() 2644 MB/s Dec 13 13:55:23.201505 kernel: raid6: using algorithm neonx2 gen() 12533 MB/s Dec 13 13:55:23.201515 kernel: raid6: .... xor() 10440 MB/s, rmw enabled Dec 13 13:55:23.202546 kernel: raid6: using neon recovery algorithm Dec 13 13:55:23.213740 kernel: xor: measuring software checksum speed Dec 13 13:55:23.213782 kernel: 8regs : 17209 MB/sec Dec 13 13:55:23.213799 kernel: 32regs : 20702 MB/sec Dec 13 13:55:23.214956 kernel: arm64_neon : 27478 MB/sec Dec 13 13:55:23.214967 kernel: xor: using function: arm64_neon (27478 MB/sec) Dec 13 13:55:23.269394 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Dec 13 13:55:23.279023 systemd[1]: Finished dracut-pre-udev.service. Dec 13 13:55:23.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:23.282000 audit: BPF prog-id=7 op=LOAD Dec 13 13:55:23.282000 audit: BPF prog-id=8 op=LOAD Dec 13 13:55:23.283377 kernel: audit: type=1130 audit(1734098123.279:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:23.283396 kernel: audit: type=1334 audit(1734098123.282:10): prog-id=7 op=LOAD Dec 13 13:55:23.283653 systemd[1]: Starting systemd-udevd.service... Dec 13 13:55:23.298661 systemd-udevd[491]: Using default interface naming scheme 'v252'. Dec 13 13:55:23.301939 systemd[1]: Started systemd-udevd.service. Dec 13 13:55:23.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:23.303837 systemd[1]: Starting dracut-pre-trigger.service... Dec 13 13:55:23.315276 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Dec 13 13:55:23.343092 systemd[1]: Finished dracut-pre-trigger.service. Dec 13 13:55:23.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:23.344536 systemd[1]: Starting systemd-udev-trigger.service... Dec 13 13:55:23.378443 systemd[1]: Finished systemd-udev-trigger.service. Dec 13 13:55:23.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:23.411422 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Dec 13 13:55:23.416666 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Dec 13 13:55:23.416686 kernel: GPT:9289727 != 19775487 Dec 13 13:55:23.416695 kernel: GPT:Alternate GPT header not at the end of the disk. Dec 13 13:55:23.416703 kernel: GPT:9289727 != 19775487 Dec 13 13:55:23.416711 kernel: GPT: Use GNU Parted to correct GPT errors. Dec 13 13:55:23.416720 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Dec 13 13:55:23.430374 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (546) Dec 13 13:55:23.437643 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Dec 13 13:55:23.440388 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Dec 13 13:55:23.441290 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Dec 13 13:55:23.445593 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Dec 13 13:55:23.448888 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Dec 13 13:55:23.450310 systemd[1]: Starting disk-uuid.service... Dec 13 13:55:23.456173 disk-uuid[568]: Primary Header is updated. Dec 13 13:55:23.456173 disk-uuid[568]: Secondary Entries is updated. Dec 13 13:55:23.456173 disk-uuid[568]: Secondary Header is updated. Dec 13 13:55:23.459379 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Dec 13 13:55:24.470430 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Dec 13 13:55:24.470488 disk-uuid[569]: The operation has completed successfully. Dec 13 13:55:24.492629 systemd[1]: disk-uuid.service: Deactivated successfully. Dec 13 13:55:24.492729 systemd[1]: Finished disk-uuid.service. Dec 13 13:55:24.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.494109 systemd[1]: Starting verity-setup.service... Dec 13 13:55:24.508427 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Dec 13 13:55:24.527900 systemd[1]: Found device dev-mapper-usr.device. Dec 13 13:55:24.529167 systemd[1]: Mounting sysusr-usr.mount... Dec 13 13:55:24.529817 systemd[1]: Finished verity-setup.service. Dec 13 13:55:24.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.581368 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Dec 13 13:55:24.581640 systemd[1]: Mounted sysusr-usr.mount. Dec 13 13:55:24.582282 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Dec 13 13:55:24.582989 systemd[1]: Starting ignition-setup.service... Dec 13 13:55:24.584736 systemd[1]: Starting parse-ip-for-networkd.service... Dec 13 13:55:24.591908 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Dec 13 13:55:24.591941 kernel: BTRFS info (device vda6): using free space tree Dec 13 13:55:24.591951 kernel: BTRFS info (device vda6): has skinny extents Dec 13 13:55:24.600510 systemd[1]: mnt-oem.mount: Deactivated successfully. Dec 13 13:55:24.606422 systemd[1]: Finished ignition-setup.service. Dec 13 13:55:24.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.608396 systemd[1]: Starting ignition-fetch-offline.service... Dec 13 13:55:24.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.669000 audit: BPF prog-id=9 op=LOAD Dec 13 13:55:24.668621 systemd[1]: Finished parse-ip-for-networkd.service. Dec 13 13:55:24.670536 systemd[1]: Starting systemd-networkd.service... Dec 13 13:55:24.681918 ignition[663]: Ignition 2.14.0 Dec 13 13:55:24.681929 ignition[663]: Stage: fetch-offline Dec 13 13:55:24.681966 ignition[663]: no configs at "/usr/lib/ignition/base.d" Dec 13 13:55:24.681975 ignition[663]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Dec 13 13:55:24.682104 ignition[663]: parsed url from cmdline: "" Dec 13 13:55:24.682107 ignition[663]: no config URL provided Dec 13 13:55:24.682115 ignition[663]: reading system config file "/usr/lib/ignition/user.ign" Dec 13 13:55:24.682121 ignition[663]: no config at "/usr/lib/ignition/user.ign" Dec 13 13:55:24.682139 ignition[663]: op(1): [started] loading QEMU firmware config module Dec 13 13:55:24.682143 ignition[663]: op(1): executing: "modprobe" "qemu_fw_cfg" Dec 13 13:55:24.687556 ignition[663]: op(1): [finished] loading QEMU firmware config module Dec 13 13:55:24.695948 systemd-networkd[746]: lo: Link UP Dec 13 13:55:24.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.695962 systemd-networkd[746]: lo: Gained carrier Dec 13 13:55:24.696539 systemd-networkd[746]: Enumeration completed Dec 13 13:55:24.696673 systemd[1]: Started systemd-networkd.service. Dec 13 13:55:24.696880 systemd-networkd[746]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Dec 13 13:55:24.697510 systemd[1]: Reached target network.target. Dec 13 13:55:24.698138 systemd-networkd[746]: eth0: Link UP Dec 13 13:55:24.698142 systemd-networkd[746]: eth0: Gained carrier Dec 13 13:55:24.698975 systemd[1]: Starting iscsiuio.service... Dec 13 13:55:24.707552 systemd[1]: Started iscsiuio.service. Dec 13 13:55:24.708928 systemd[1]: Starting iscsid.service... Dec 13 13:55:24.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.711999 iscsid[753]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Dec 13 13:55:24.711999 iscsid[753]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Dec 13 13:55:24.711999 iscsid[753]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Dec 13 13:55:24.711999 iscsid[753]: If using hardware iscsi like qla4xxx this message can be ignored. Dec 13 13:55:24.711999 iscsid[753]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Dec 13 13:55:24.711999 iscsid[753]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Dec 13 13:55:24.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.714824 systemd[1]: Started iscsid.service. Dec 13 13:55:24.718868 systemd[1]: Starting dracut-initqueue.service... Dec 13 13:55:24.722509 systemd-networkd[746]: eth0: DHCPv4 address 10.0.0.14/16, gateway 10.0.0.1 acquired from 10.0.0.1 Dec 13 13:55:24.728567 systemd[1]: Finished dracut-initqueue.service. Dec 13 13:55:24.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.729402 systemd[1]: Reached target remote-fs-pre.target. Dec 13 13:55:24.730654 systemd[1]: Reached target remote-cryptsetup.target. Dec 13 13:55:24.731981 systemd[1]: Reached target remote-fs.target. Dec 13 13:55:24.733906 systemd[1]: Starting dracut-pre-mount.service... Dec 13 13:55:24.741159 systemd[1]: Finished dracut-pre-mount.service. Dec 13 13:55:24.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.749523 ignition[663]: parsing config with SHA512: ac54fbe76d130ec6917d05a1b5f82527e3e9f2b23630516cfa52fe2546c3624fe8184d30614ec113ed0db681ecef8e9a251e57730bf6d0784f569276d54c1f56 Dec 13 13:55:24.755316 unknown[663]: fetched base config from "system" Dec 13 13:55:24.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.755754 ignition[663]: fetch-offline: fetch-offline passed Dec 13 13:55:24.755328 unknown[663]: fetched user config from "qemu" Dec 13 13:55:24.755805 ignition[663]: Ignition finished successfully Dec 13 13:55:24.756724 systemd[1]: Finished ignition-fetch-offline.service. Dec 13 13:55:24.757453 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Dec 13 13:55:24.758064 systemd[1]: Starting ignition-kargs.service... Dec 13 13:55:24.765781 ignition[767]: Ignition 2.14.0 Dec 13 13:55:24.765789 ignition[767]: Stage: kargs Dec 13 13:55:24.765871 ignition[767]: no configs at "/usr/lib/ignition/base.d" Dec 13 13:55:24.767626 systemd[1]: Finished ignition-kargs.service. Dec 13 13:55:24.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.765881 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Dec 13 13:55:24.766689 ignition[767]: kargs: kargs passed Dec 13 13:55:24.769408 systemd[1]: Starting ignition-disks.service... Dec 13 13:55:24.766730 ignition[767]: Ignition finished successfully Dec 13 13:55:24.775497 ignition[773]: Ignition 2.14.0 Dec 13 13:55:24.775510 ignition[773]: Stage: disks Dec 13 13:55:24.775592 ignition[773]: no configs at "/usr/lib/ignition/base.d" Dec 13 13:55:24.775601 ignition[773]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Dec 13 13:55:24.776371 ignition[773]: disks: disks passed Dec 13 13:55:24.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.777894 systemd[1]: Finished ignition-disks.service. Dec 13 13:55:24.776413 ignition[773]: Ignition finished successfully Dec 13 13:55:24.779220 systemd[1]: Reached target initrd-root-device.target. Dec 13 13:55:24.780073 systemd[1]: Reached target local-fs-pre.target. Dec 13 13:55:24.781041 systemd[1]: Reached target local-fs.target. Dec 13 13:55:24.782134 systemd[1]: Reached target sysinit.target. Dec 13 13:55:24.783143 systemd[1]: Reached target basic.target. Dec 13 13:55:24.784848 systemd[1]: Starting systemd-fsck-root.service... Dec 13 13:55:24.794865 systemd-fsck[781]: ROOT: clean, 621/553520 files, 56020/553472 blocks Dec 13 13:55:24.798711 systemd[1]: Finished systemd-fsck-root.service. Dec 13 13:55:24.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.800094 systemd[1]: Mounting sysroot.mount... Dec 13 13:55:24.806386 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Dec 13 13:55:24.806861 systemd[1]: Mounted sysroot.mount. Dec 13 13:55:24.807504 systemd[1]: Reached target initrd-root-fs.target. Dec 13 13:55:24.809913 systemd[1]: Mounting sysroot-usr.mount... Dec 13 13:55:24.810683 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Dec 13 13:55:24.810721 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Dec 13 13:55:24.810743 systemd[1]: Reached target ignition-diskful.target. Dec 13 13:55:24.812410 systemd[1]: Mounted sysroot-usr.mount. Dec 13 13:55:24.814818 systemd[1]: Starting initrd-setup-root.service... Dec 13 13:55:24.818814 initrd-setup-root[791]: cut: /sysroot/etc/passwd: No such file or directory Dec 13 13:55:24.822970 initrd-setup-root[799]: cut: /sysroot/etc/group: No such file or directory Dec 13 13:55:24.825778 initrd-setup-root[807]: cut: /sysroot/etc/shadow: No such file or directory Dec 13 13:55:24.829196 initrd-setup-root[815]: cut: /sysroot/etc/gshadow: No such file or directory Dec 13 13:55:24.855290 systemd[1]: Finished initrd-setup-root.service. Dec 13 13:55:24.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.857208 systemd[1]: Starting ignition-mount.service... Dec 13 13:55:24.858376 systemd[1]: Starting sysroot-boot.service... Dec 13 13:55:24.862826 bash[832]: umount: /sysroot/usr/share/oem: not mounted. Dec 13 13:55:24.870080 ignition[834]: INFO : Ignition 2.14.0 Dec 13 13:55:24.870080 ignition[834]: INFO : Stage: mount Dec 13 13:55:24.871387 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Dec 13 13:55:24.871387 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Dec 13 13:55:24.871387 ignition[834]: INFO : mount: mount passed Dec 13 13:55:24.871387 ignition[834]: INFO : Ignition finished successfully Dec 13 13:55:24.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:24.872055 systemd[1]: Finished ignition-mount.service. Dec 13 13:55:24.876549 systemd[1]: Finished sysroot-boot.service. Dec 13 13:55:24.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:25.539464 systemd[1]: Mounting sysroot-usr-share-oem.mount... Dec 13 13:55:25.545371 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (842) Dec 13 13:55:25.545400 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Dec 13 13:55:25.546947 kernel: BTRFS info (device vda6): using free space tree Dec 13 13:55:25.546960 kernel: BTRFS info (device vda6): has skinny extents Dec 13 13:55:25.550230 systemd[1]: Mounted sysroot-usr-share-oem.mount. Dec 13 13:55:25.551607 systemd[1]: Starting ignition-files.service... Dec 13 13:55:25.564926 ignition[862]: INFO : Ignition 2.14.0 Dec 13 13:55:25.564926 ignition[862]: INFO : Stage: files Dec 13 13:55:25.566458 ignition[862]: INFO : no configs at "/usr/lib/ignition/base.d" Dec 13 13:55:25.566458 ignition[862]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Dec 13 13:55:25.566458 ignition[862]: DEBUG : files: compiled without relabeling support, skipping Dec 13 13:55:25.569220 ignition[862]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Dec 13 13:55:25.569220 ignition[862]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Dec 13 13:55:25.578046 ignition[862]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Dec 13 13:55:25.579153 ignition[862]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Dec 13 13:55:25.579153 ignition[862]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Dec 13 13:55:25.579153 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Dec 13 13:55:25.578650 unknown[862]: wrote ssh authorized keys file for user: core Dec 13 13:55:25.583858 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Dec 13 13:55:25.676510 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Dec 13 13:55:25.828879 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-arm64.raw" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-arm64.raw" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-arm64.raw" Dec 13 13:55:25.830366 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.30.1-arm64.raw: attempt #1 Dec 13 13:55:26.152052 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Dec 13 13:55:26.543021 ignition[862]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-arm64.raw" Dec 13 13:55:26.543021 ignition[862]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Dec 13 13:55:26.545887 ignition[862]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(f): [started] setting preset to disabled for "coreos-metadata.service" Dec 13 13:55:26.547638 ignition[862]: INFO : files: op(f): op(10): [started] removing enablement symlink(s) for "coreos-metadata.service" Dec 13 13:55:26.605494 systemd-networkd[746]: eth0: Gained IPv6LL Dec 13 13:55:26.606246 ignition[862]: INFO : files: op(f): op(10): [finished] removing enablement symlink(s) for "coreos-metadata.service" Dec 13 13:55:26.606246 ignition[862]: INFO : files: op(f): [finished] setting preset to disabled for "coreos-metadata.service" Dec 13 13:55:26.606246 ignition[862]: INFO : files: op(11): [started] setting preset to enabled for "prepare-helm.service" Dec 13 13:55:26.606246 ignition[862]: INFO : files: op(11): [finished] setting preset to enabled for "prepare-helm.service" Dec 13 13:55:26.606246 ignition[862]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Dec 13 13:55:26.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.607376 systemd[1]: Finished ignition-files.service. Dec 13 13:55:26.614633 ignition[862]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Dec 13 13:55:26.614633 ignition[862]: INFO : files: files passed Dec 13 13:55:26.614633 ignition[862]: INFO : Ignition finished successfully Dec 13 13:55:26.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.609143 systemd[1]: Starting initrd-setup-root-after-ignition.service... Dec 13 13:55:26.610058 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Dec 13 13:55:26.619707 initrd-setup-root-after-ignition[887]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Dec 13 13:55:26.610715 systemd[1]: Starting ignition-quench.service... Dec 13 13:55:26.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.621980 initrd-setup-root-after-ignition[890]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Dec 13 13:55:26.614565 systemd[1]: ignition-quench.service: Deactivated successfully. Dec 13 13:55:26.614644 systemd[1]: Finished ignition-quench.service. Dec 13 13:55:26.619869 systemd[1]: Finished initrd-setup-root-after-ignition.service. Dec 13 13:55:26.621542 systemd[1]: Reached target ignition-complete.target. Dec 13 13:55:26.623233 systemd[1]: Starting initrd-parse-etc.service... Dec 13 13:55:26.636839 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Dec 13 13:55:26.636930 systemd[1]: Finished initrd-parse-etc.service. Dec 13 13:55:26.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.638182 systemd[1]: Reached target initrd-fs.target. Dec 13 13:55:26.639091 systemd[1]: Reached target initrd.target. Dec 13 13:55:26.640268 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Dec 13 13:55:26.640981 systemd[1]: Starting dracut-pre-pivot.service... Dec 13 13:55:26.650956 systemd[1]: Finished dracut-pre-pivot.service. Dec 13 13:55:26.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.652290 systemd[1]: Starting initrd-cleanup.service... Dec 13 13:55:26.660082 systemd[1]: Stopped target nss-lookup.target. Dec 13 13:55:26.660885 systemd[1]: Stopped target remote-cryptsetup.target. Dec 13 13:55:26.661980 systemd[1]: Stopped target timers.target. Dec 13 13:55:26.662983 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Dec 13 13:55:26.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.663085 systemd[1]: Stopped dracut-pre-pivot.service. Dec 13 13:55:26.664152 systemd[1]: Stopped target initrd.target. Dec 13 13:55:26.665206 systemd[1]: Stopped target basic.target. Dec 13 13:55:26.666158 systemd[1]: Stopped target ignition-complete.target. Dec 13 13:55:26.667168 systemd[1]: Stopped target ignition-diskful.target. Dec 13 13:55:26.668154 systemd[1]: Stopped target initrd-root-device.target. Dec 13 13:55:26.669268 systemd[1]: Stopped target remote-fs.target. Dec 13 13:55:26.670417 systemd[1]: Stopped target remote-fs-pre.target. Dec 13 13:55:26.671560 systemd[1]: Stopped target sysinit.target. Dec 13 13:55:26.672601 systemd[1]: Stopped target local-fs.target. Dec 13 13:55:26.673697 systemd[1]: Stopped target local-fs-pre.target. Dec 13 13:55:26.674715 systemd[1]: Stopped target swap.target. Dec 13 13:55:26.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.675619 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Dec 13 13:55:26.675730 systemd[1]: Stopped dracut-pre-mount.service. Dec 13 13:55:26.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.676764 systemd[1]: Stopped target cryptsetup.target. Dec 13 13:55:26.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.677703 systemd[1]: dracut-initqueue.service: Deactivated successfully. Dec 13 13:55:26.677798 systemd[1]: Stopped dracut-initqueue.service. Dec 13 13:55:26.678902 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Dec 13 13:55:26.678993 systemd[1]: Stopped ignition-fetch-offline.service. Dec 13 13:55:26.680070 systemd[1]: Stopped target paths.target. Dec 13 13:55:26.680983 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Dec 13 13:55:26.684385 systemd[1]: Stopped systemd-ask-password-console.path. Dec 13 13:55:26.685450 systemd[1]: Stopped target slices.target. Dec 13 13:55:26.686526 systemd[1]: Stopped target sockets.target. Dec 13 13:55:26.687468 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Dec 13 13:55:26.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.687573 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Dec 13 13:55:26.689000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.688584 systemd[1]: ignition-files.service: Deactivated successfully. Dec 13 13:55:26.688671 systemd[1]: Stopped ignition-files.service. Dec 13 13:55:26.692120 iscsid[753]: iscsid shutting down. Dec 13 13:55:26.690739 systemd[1]: Stopping ignition-mount.service... Dec 13 13:55:26.693874 systemd[1]: Stopping iscsid.service... Dec 13 13:55:26.694948 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Dec 13 13:55:26.695068 systemd[1]: Stopped kmod-static-nodes.service. Dec 13 13:55:26.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.697162 systemd[1]: Stopping sysroot-boot.service... Dec 13 13:55:26.698226 ignition[903]: INFO : Ignition 2.14.0 Dec 13 13:55:26.698226 ignition[903]: INFO : Stage: umount Dec 13 13:55:26.698226 ignition[903]: INFO : no configs at "/usr/lib/ignition/base.d" Dec 13 13:55:26.698226 ignition[903]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Dec 13 13:55:26.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.697781 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Dec 13 13:55:26.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.697910 systemd[1]: Stopped systemd-udev-trigger.service. Dec 13 13:55:26.698920 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Dec 13 13:55:26.699004 systemd[1]: Stopped dracut-pre-trigger.service. Dec 13 13:55:26.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.701286 systemd[1]: iscsid.service: Deactivated successfully. Dec 13 13:55:26.701419 systemd[1]: Stopped iscsid.service. Dec 13 13:55:26.702709 systemd[1]: iscsid.socket: Deactivated successfully. Dec 13 13:55:26.710160 ignition[903]: INFO : umount: umount passed Dec 13 13:55:26.710160 ignition[903]: INFO : Ignition finished successfully Dec 13 13:55:26.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.702771 systemd[1]: Closed iscsid.socket. Dec 13 13:55:26.703814 systemd[1]: Stopping iscsiuio.service... Dec 13 13:55:26.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.705965 systemd[1]: initrd-cleanup.service: Deactivated successfully. Dec 13 13:55:26.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.706051 systemd[1]: Finished initrd-cleanup.service. Dec 13 13:55:26.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.707866 systemd[1]: iscsiuio.service: Deactivated successfully. Dec 13 13:55:26.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.707971 systemd[1]: Stopped iscsiuio.service. Dec 13 13:55:26.712431 systemd[1]: sysroot-boot.mount: Deactivated successfully. Dec 13 13:55:26.712801 systemd[1]: ignition-mount.service: Deactivated successfully. Dec 13 13:55:26.712882 systemd[1]: Stopped ignition-mount.service. Dec 13 13:55:26.713793 systemd[1]: Stopped target network.target. Dec 13 13:55:26.715473 systemd[1]: iscsiuio.socket: Deactivated successfully. Dec 13 13:55:26.715511 systemd[1]: Closed iscsiuio.socket. Dec 13 13:55:26.716105 systemd[1]: ignition-disks.service: Deactivated successfully. Dec 13 13:55:26.716146 systemd[1]: Stopped ignition-disks.service. Dec 13 13:55:26.716798 systemd[1]: ignition-kargs.service: Deactivated successfully. Dec 13 13:55:26.716834 systemd[1]: Stopped ignition-kargs.service. Dec 13 13:55:26.717949 systemd[1]: ignition-setup.service: Deactivated successfully. Dec 13 13:55:26.717983 systemd[1]: Stopped ignition-setup.service. Dec 13 13:55:26.719159 systemd[1]: Stopping systemd-networkd.service... Dec 13 13:55:26.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.720248 systemd[1]: Stopping systemd-resolved.service... Dec 13 13:55:26.726418 systemd-networkd[746]: eth0: DHCPv6 lease lost Dec 13 13:55:26.727804 systemd[1]: systemd-networkd.service: Deactivated successfully. Dec 13 13:55:26.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.727896 systemd[1]: Stopped systemd-networkd.service. Dec 13 13:55:26.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.729004 systemd[1]: systemd-networkd.socket: Deactivated successfully. Dec 13 13:55:26.729030 systemd[1]: Closed systemd-networkd.socket. Dec 13 13:55:26.730707 systemd[1]: Stopping network-cleanup.service... Dec 13 13:55:26.731527 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Dec 13 13:55:26.731583 systemd[1]: Stopped parse-ip-for-networkd.service. Dec 13 13:55:26.732857 systemd[1]: systemd-sysctl.service: Deactivated successfully. Dec 13 13:55:26.732895 systemd[1]: Stopped systemd-sysctl.service. Dec 13 13:55:26.738825 systemd[1]: systemd-modules-load.service: Deactivated successfully. Dec 13 13:55:26.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.746000 audit: BPF prog-id=9 op=UNLOAD Dec 13 13:55:26.738872 systemd[1]: Stopped systemd-modules-load.service. Dec 13 13:55:26.743126 systemd[1]: Stopping systemd-udevd.service... Dec 13 13:55:26.748809 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Dec 13 13:55:26.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.749242 systemd[1]: systemd-resolved.service: Deactivated successfully. Dec 13 13:55:26.749344 systemd[1]: Stopped systemd-resolved.service. Dec 13 13:55:26.755038 systemd[1]: systemd-udevd.service: Deactivated successfully. Dec 13 13:55:26.755183 systemd[1]: Stopped systemd-udevd.service. Dec 13 13:55:26.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.756881 systemd[1]: sysroot-boot.service: Deactivated successfully. Dec 13 13:55:26.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.756953 systemd[1]: Stopped sysroot-boot.service. Dec 13 13:55:26.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.758000 audit: BPF prog-id=6 op=UNLOAD Dec 13 13:55:26.757821 systemd[1]: network-cleanup.service: Deactivated successfully. Dec 13 13:55:26.757899 systemd[1]: Stopped network-cleanup.service. Dec 13 13:55:26.759153 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Dec 13 13:55:26.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.759186 systemd[1]: Closed systemd-udevd-control.socket. Dec 13 13:55:26.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.760054 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Dec 13 13:55:26.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.760083 systemd[1]: Closed systemd-udevd-kernel.socket. Dec 13 13:55:26.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.761171 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Dec 13 13:55:26.761209 systemd[1]: Stopped dracut-pre-udev.service. Dec 13 13:55:26.762214 systemd[1]: dracut-cmdline.service: Deactivated successfully. Dec 13 13:55:26.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.762250 systemd[1]: Stopped dracut-cmdline.service. Dec 13 13:55:26.763476 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Dec 13 13:55:26.763516 systemd[1]: Stopped dracut-cmdline-ask.service. Dec 13 13:55:26.764498 systemd[1]: initrd-setup-root.service: Deactivated successfully. Dec 13 13:55:26.764533 systemd[1]: Stopped initrd-setup-root.service. Dec 13 13:55:26.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:26.766290 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Dec 13 13:55:26.767459 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Dec 13 13:55:26.767512 systemd[1]: Stopped systemd-vconsole-setup.service. Dec 13 13:55:26.771459 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Dec 13 13:55:26.771535 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Dec 13 13:55:26.772475 systemd[1]: Reached target initrd-switch-root.target. Dec 13 13:55:26.774146 systemd[1]: Starting initrd-switch-root.service... Dec 13 13:55:26.780276 systemd[1]: Switching root. Dec 13 13:55:26.794825 systemd-journald[289]: Journal stopped Dec 13 13:55:28.821181 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Dec 13 13:55:28.821233 kernel: SELinux: Class mctp_socket not defined in policy. Dec 13 13:55:28.821246 kernel: SELinux: Class anon_inode not defined in policy. Dec 13 13:55:28.821255 kernel: SELinux: the above unknown classes and permissions will be allowed Dec 13 13:55:28.821265 kernel: SELinux: policy capability network_peer_controls=1 Dec 13 13:55:28.821277 kernel: SELinux: policy capability open_perms=1 Dec 13 13:55:28.821286 kernel: SELinux: policy capability extended_socket_class=1 Dec 13 13:55:28.821296 kernel: SELinux: policy capability always_check_network=0 Dec 13 13:55:28.821305 kernel: SELinux: policy capability cgroup_seclabel=1 Dec 13 13:55:28.821314 kernel: SELinux: policy capability nnp_nosuid_transition=1 Dec 13 13:55:28.821333 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Dec 13 13:55:28.821347 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Dec 13 13:55:28.821371 systemd[1]: Successfully loaded SELinux policy in 36.037ms. Dec 13 13:55:28.821394 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.990ms. Dec 13 13:55:28.821407 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Dec 13 13:55:28.821418 systemd[1]: Detected virtualization kvm. Dec 13 13:55:28.821428 systemd[1]: Detected architecture arm64. Dec 13 13:55:28.821438 systemd[1]: Detected first boot. Dec 13 13:55:28.821449 systemd[1]: Initializing machine ID from VM UUID. Dec 13 13:55:28.821459 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Dec 13 13:55:28.821469 kernel: kauditd_printk_skb: 70 callbacks suppressed Dec 13 13:55:28.821481 kernel: audit: type=1400 audit(1734098127.021:81): avc: denied { associate } for pid=936 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Dec 13 13:55:28.821492 kernel: audit: type=1300 audit(1734098127.021:81): arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c58ac a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=919 pid=936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:28.821503 kernel: audit: type=1327 audit(1734098127.021:81): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 13:55:28.821517 kernel: audit: type=1400 audit(1734098127.022:82): avc: denied { associate } for pid=936 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Dec 13 13:55:28.821528 kernel: audit: type=1300 audit(1734098127.022:82): arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5985 a2=1ed a3=0 items=2 ppid=919 pid=936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:28.821537 kernel: audit: type=1307 audit(1734098127.022:82): cwd="/" Dec 13 13:55:28.821549 kernel: audit: type=1302 audit(1734098127.022:82): item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:55:28.821559 kernel: audit: type=1302 audit(1734098127.022:82): item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:55:28.821569 kernel: audit: type=1327 audit(1734098127.022:82): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 13:55:28.821580 systemd[1]: Populated /etc with preset unit settings. Dec 13 13:55:28.821590 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 13:55:28.821603 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 13:55:28.821615 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 13:55:28.821626 kernel: audit: type=1334 audit(1734098128.677:83): prog-id=12 op=LOAD Dec 13 13:55:28.821642 systemd[1]: initrd-switch-root.service: Deactivated successfully. Dec 13 13:55:28.821652 systemd[1]: Stopped initrd-switch-root.service. Dec 13 13:55:28.821662 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Dec 13 13:55:28.821673 systemd[1]: Created slice system-addon\x2dconfig.slice. Dec 13 13:55:28.821683 systemd[1]: Created slice system-addon\x2drun.slice. Dec 13 13:55:28.821695 systemd[1]: Created slice system-getty.slice. Dec 13 13:55:28.821705 systemd[1]: Created slice system-modprobe.slice. Dec 13 13:55:28.821716 systemd[1]: Created slice system-serial\x2dgetty.slice. Dec 13 13:55:28.821726 systemd[1]: Created slice system-system\x2dcloudinit.slice. Dec 13 13:55:28.821737 systemd[1]: Created slice system-systemd\x2dfsck.slice. Dec 13 13:55:28.821747 systemd[1]: Created slice user.slice. Dec 13 13:55:28.821758 systemd[1]: Started systemd-ask-password-console.path. Dec 13 13:55:28.821768 systemd[1]: Started systemd-ask-password-wall.path. Dec 13 13:55:28.821780 systemd[1]: Set up automount boot.automount. Dec 13 13:55:28.821790 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Dec 13 13:55:28.821801 systemd[1]: Stopped target initrd-switch-root.target. Dec 13 13:55:28.821811 systemd[1]: Stopped target initrd-fs.target. Dec 13 13:55:28.821821 systemd[1]: Stopped target initrd-root-fs.target. Dec 13 13:55:28.821832 systemd[1]: Reached target integritysetup.target. Dec 13 13:55:28.821842 systemd[1]: Reached target remote-cryptsetup.target. Dec 13 13:55:28.821852 systemd[1]: Reached target remote-fs.target. Dec 13 13:55:28.821863 systemd[1]: Reached target slices.target. Dec 13 13:55:28.821875 systemd[1]: Reached target swap.target. Dec 13 13:55:28.821885 systemd[1]: Reached target torcx.target. Dec 13 13:55:28.821895 systemd[1]: Reached target veritysetup.target. Dec 13 13:55:28.821906 systemd[1]: Listening on systemd-coredump.socket. Dec 13 13:55:28.821916 systemd[1]: Listening on systemd-initctl.socket. Dec 13 13:55:28.821927 systemd[1]: Listening on systemd-networkd.socket. Dec 13 13:55:28.821941 systemd[1]: Listening on systemd-udevd-control.socket. Dec 13 13:55:28.821951 systemd[1]: Listening on systemd-udevd-kernel.socket. Dec 13 13:55:28.821961 systemd[1]: Listening on systemd-userdbd.socket. Dec 13 13:55:28.821972 systemd[1]: Mounting dev-hugepages.mount... Dec 13 13:55:28.821983 systemd[1]: Mounting dev-mqueue.mount... Dec 13 13:55:28.821993 systemd[1]: Mounting media.mount... Dec 13 13:55:28.822003 systemd[1]: Mounting sys-kernel-debug.mount... Dec 13 13:55:28.822014 systemd[1]: Mounting sys-kernel-tracing.mount... Dec 13 13:55:28.822024 systemd[1]: Mounting tmp.mount... Dec 13 13:55:28.822035 systemd[1]: Starting flatcar-tmpfiles.service... Dec 13 13:55:28.822045 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 13:55:28.822056 systemd[1]: Starting kmod-static-nodes.service... Dec 13 13:55:28.822067 systemd[1]: Starting modprobe@configfs.service... Dec 13 13:55:28.822079 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 13:55:28.822089 systemd[1]: Starting modprobe@drm.service... Dec 13 13:55:28.822103 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 13:55:28.822114 systemd[1]: Starting modprobe@fuse.service... Dec 13 13:55:28.822124 systemd[1]: Starting modprobe@loop.service... Dec 13 13:55:28.822135 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Dec 13 13:55:28.822146 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Dec 13 13:55:28.822157 systemd[1]: Stopped systemd-fsck-root.service. Dec 13 13:55:28.822167 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Dec 13 13:55:28.822179 systemd[1]: Stopped systemd-fsck-usr.service. Dec 13 13:55:28.822189 systemd[1]: Stopped systemd-journald.service. Dec 13 13:55:28.822200 systemd[1]: Starting systemd-journald.service... Dec 13 13:55:28.822211 systemd[1]: Starting systemd-modules-load.service... Dec 13 13:55:28.822221 systemd[1]: Starting systemd-network-generator.service... Dec 13 13:55:28.822231 kernel: fuse: init (API version 7.34) Dec 13 13:55:28.822241 systemd[1]: Starting systemd-remount-fs.service... Dec 13 13:55:28.822251 systemd[1]: Starting systemd-udev-trigger.service... Dec 13 13:55:28.822262 kernel: loop: module loaded Dec 13 13:55:28.822273 systemd[1]: verity-setup.service: Deactivated successfully. Dec 13 13:55:28.822285 systemd[1]: Stopped verity-setup.service. Dec 13 13:55:28.822295 systemd[1]: Mounted dev-hugepages.mount. Dec 13 13:55:28.822305 systemd[1]: Mounted dev-mqueue.mount. Dec 13 13:55:28.822315 systemd[1]: Mounted media.mount. Dec 13 13:55:28.822333 systemd[1]: Mounted sys-kernel-debug.mount. Dec 13 13:55:28.822344 systemd[1]: Mounted sys-kernel-tracing.mount. Dec 13 13:55:28.822373 systemd[1]: Mounted tmp.mount. Dec 13 13:55:28.822387 systemd[1]: Finished kmod-static-nodes.service. Dec 13 13:55:28.822399 systemd[1]: modprobe@configfs.service: Deactivated successfully. Dec 13 13:55:28.822410 systemd[1]: Finished modprobe@configfs.service. Dec 13 13:55:28.822420 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 13:55:28.822430 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 13:55:28.822440 systemd[1]: modprobe@drm.service: Deactivated successfully. Dec 13 13:55:28.822451 systemd[1]: Finished modprobe@drm.service. Dec 13 13:55:28.822462 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 13:55:28.822472 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 13:55:28.822483 systemd[1]: modprobe@fuse.service: Deactivated successfully. Dec 13 13:55:28.822493 systemd[1]: Finished modprobe@fuse.service. Dec 13 13:55:28.822503 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 13:55:28.822514 systemd[1]: Finished modprobe@loop.service. Dec 13 13:55:28.822527 systemd-journald[994]: Journal started Dec 13 13:55:28.822575 systemd-journald[994]: Runtime Journal (/run/log/journal/12c45069393445deba74bd0aedaae58f) is 6.0M, max 48.7M, 42.6M free. Dec 13 13:55:26.864000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Dec 13 13:55:26.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Dec 13 13:55:26.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Dec 13 13:55:26.969000 audit: BPF prog-id=10 op=LOAD Dec 13 13:55:26.969000 audit: BPF prog-id=10 op=UNLOAD Dec 13 13:55:26.969000 audit: BPF prog-id=11 op=LOAD Dec 13 13:55:26.969000 audit: BPF prog-id=11 op=UNLOAD Dec 13 13:55:27.021000 audit[936]: AVC avc: denied { associate } for pid=936 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Dec 13 13:55:27.021000 audit[936]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c58ac a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=919 pid=936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:27.021000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 13:55:27.022000 audit[936]: AVC avc: denied { associate } for pid=936 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Dec 13 13:55:27.022000 audit[936]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5985 a2=1ed a3=0 items=2 ppid=919 pid=936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:27.022000 audit: CWD cwd="/" Dec 13 13:55:27.022000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:55:27.022000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:55:27.022000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Dec 13 13:55:28.677000 audit: BPF prog-id=12 op=LOAD Dec 13 13:55:28.677000 audit: BPF prog-id=3 op=UNLOAD Dec 13 13:55:28.677000 audit: BPF prog-id=13 op=LOAD Dec 13 13:55:28.678000 audit: BPF prog-id=14 op=LOAD Dec 13 13:55:28.678000 audit: BPF prog-id=4 op=UNLOAD Dec 13 13:55:28.678000 audit: BPF prog-id=5 op=UNLOAD Dec 13 13:55:28.678000 audit: BPF prog-id=15 op=LOAD Dec 13 13:55:28.678000 audit: BPF prog-id=12 op=UNLOAD Dec 13 13:55:28.678000 audit: BPF prog-id=16 op=LOAD Dec 13 13:55:28.678000 audit: BPF prog-id=17 op=LOAD Dec 13 13:55:28.678000 audit: BPF prog-id=13 op=UNLOAD Dec 13 13:55:28.678000 audit: BPF prog-id=14 op=UNLOAD Dec 13 13:55:28.679000 audit: BPF prog-id=18 op=LOAD Dec 13 13:55:28.679000 audit: BPF prog-id=15 op=UNLOAD Dec 13 13:55:28.679000 audit: BPF prog-id=19 op=LOAD Dec 13 13:55:28.679000 audit: BPF prog-id=20 op=LOAD Dec 13 13:55:28.679000 audit: BPF prog-id=16 op=UNLOAD Dec 13 13:55:28.679000 audit: BPF prog-id=17 op=UNLOAD Dec 13 13:55:28.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.695000 audit: BPF prog-id=18 op=UNLOAD Dec 13 13:55:28.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.779000 audit: BPF prog-id=21 op=LOAD Dec 13 13:55:28.779000 audit: BPF prog-id=22 op=LOAD Dec 13 13:55:28.779000 audit: BPF prog-id=23 op=LOAD Dec 13 13:55:28.779000 audit: BPF prog-id=19 op=UNLOAD Dec 13 13:55:28.779000 audit: BPF prog-id=20 op=UNLOAD Dec 13 13:55:28.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.818000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Dec 13 13:55:28.818000 audit[994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffff47d8fd0 a2=4000 a3=1 items=0 ppid=1 pid=994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:28.818000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Dec 13 13:55:28.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:27.020171 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 13:55:28.676095 systemd[1]: Queued start job for default target multi-user.target. Dec 13 13:55:27.020432 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Dec 13 13:55:28.676107 systemd[1]: Unnecessary job was removed for dev-vda6.device. Dec 13 13:55:27.020451 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Dec 13 13:55:28.680489 systemd[1]: systemd-journald.service: Deactivated successfully. Dec 13 13:55:27.020482 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Dec 13 13:55:27.020492 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Dec 13 13:55:27.020520 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Dec 13 13:55:27.020532 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Dec 13 13:55:27.020853 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Dec 13 13:55:27.020890 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Dec 13 13:55:27.020902 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Dec 13 13:55:27.021311 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Dec 13 13:55:28.824862 systemd[1]: Started systemd-journald.service. Dec 13 13:55:27.021370 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Dec 13 13:55:27.021389 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.6: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.6 Dec 13 13:55:27.021404 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Dec 13 13:55:27.021422 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.6: no such file or directory" path=/var/lib/torcx/store/3510.3.6 Dec 13 13:55:27.021436 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Dec 13 13:55:28.431380 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:28Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 13:55:28.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.431639 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:28Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 13:55:28.431769 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:28Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 13:55:28.825519 systemd[1]: Finished systemd-modules-load.service. Dec 13 13:55:28.431941 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:28Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Dec 13 13:55:28.431988 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:28Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Dec 13 13:55:28.432044 /usr/lib/systemd/system-generators/torcx-generator[936]: time="2024-12-13T13:55:28Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Dec 13 13:55:28.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.826555 systemd[1]: Finished systemd-network-generator.service. Dec 13 13:55:28.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.827554 systemd[1]: Finished systemd-remount-fs.service. Dec 13 13:55:28.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.828906 systemd[1]: Reached target network-pre.target. Dec 13 13:55:28.830662 systemd[1]: Mounting sys-fs-fuse-connections.mount... Dec 13 13:55:28.832237 systemd[1]: Mounting sys-kernel-config.mount... Dec 13 13:55:28.832955 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Dec 13 13:55:28.836347 systemd[1]: Starting systemd-hwdb-update.service... Dec 13 13:55:28.839408 systemd[1]: Starting systemd-journal-flush.service... Dec 13 13:55:28.840123 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 13:55:28.841138 systemd[1]: Starting systemd-random-seed.service... Dec 13 13:55:28.841915 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 13:55:28.842955 systemd[1]: Starting systemd-sysctl.service... Dec 13 13:55:28.845505 systemd[1]: Mounted sys-fs-fuse-connections.mount. Dec 13 13:55:28.846329 systemd[1]: Mounted sys-kernel-config.mount. Dec 13 13:55:28.854267 systemd-journald[994]: Time spent on flushing to /var/log/journal/12c45069393445deba74bd0aedaae58f is 14.059ms for 997 entries. Dec 13 13:55:28.854267 systemd-journald[994]: System Journal (/var/log/journal/12c45069393445deba74bd0aedaae58f) is 8.0M, max 195.6M, 187.6M free. Dec 13 13:55:28.878246 systemd-journald[994]: Received client request to flush runtime journal. Dec 13 13:55:28.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.855264 systemd[1]: Finished systemd-udev-trigger.service. Dec 13 13:55:28.878703 udevadm[1036]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Dec 13 13:55:28.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:28.857282 systemd[1]: Starting systemd-udev-settle.service... Dec 13 13:55:28.858383 systemd[1]: Finished systemd-random-seed.service. Dec 13 13:55:28.859156 systemd[1]: Reached target first-boot-complete.target. Dec 13 13:55:28.862669 systemd[1]: Finished flatcar-tmpfiles.service. Dec 13 13:55:28.865930 systemd[1]: Starting systemd-sysusers.service... Dec 13 13:55:28.869305 systemd[1]: Finished systemd-sysctl.service. Dec 13 13:55:28.879151 systemd[1]: Finished systemd-journal-flush.service. Dec 13 13:55:28.885865 systemd[1]: Finished systemd-sysusers.service. Dec 13 13:55:28.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.224339 systemd[1]: Finished systemd-hwdb-update.service. Dec 13 13:55:29.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.225000 audit: BPF prog-id=24 op=LOAD Dec 13 13:55:29.225000 audit: BPF prog-id=25 op=LOAD Dec 13 13:55:29.225000 audit: BPF prog-id=7 op=UNLOAD Dec 13 13:55:29.225000 audit: BPF prog-id=8 op=UNLOAD Dec 13 13:55:29.226427 systemd[1]: Starting systemd-udevd.service... Dec 13 13:55:29.245713 systemd-udevd[1040]: Using default interface naming scheme 'v252'. Dec 13 13:55:29.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.265000 audit: BPF prog-id=26 op=LOAD Dec 13 13:55:29.261161 systemd[1]: Started systemd-udevd.service. Dec 13 13:55:29.266709 systemd[1]: Starting systemd-networkd.service... Dec 13 13:55:29.275000 audit: BPF prog-id=27 op=LOAD Dec 13 13:55:29.275000 audit: BPF prog-id=28 op=LOAD Dec 13 13:55:29.275000 audit: BPF prog-id=29 op=LOAD Dec 13 13:55:29.276922 systemd[1]: Starting systemd-userdbd.service... Dec 13 13:55:29.292637 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Dec 13 13:55:29.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.305136 systemd[1]: Started systemd-userdbd.service. Dec 13 13:55:29.332444 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Dec 13 13:55:29.356310 systemd-networkd[1055]: lo: Link UP Dec 13 13:55:29.356327 systemd-networkd[1055]: lo: Gained carrier Dec 13 13:55:29.356674 systemd-networkd[1055]: Enumeration completed Dec 13 13:55:29.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.356763 systemd[1]: Started systemd-networkd.service. Dec 13 13:55:29.357014 systemd-networkd[1055]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Dec 13 13:55:29.358396 systemd-networkd[1055]: eth0: Link UP Dec 13 13:55:29.358407 systemd-networkd[1055]: eth0: Gained carrier Dec 13 13:55:29.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.382737 systemd[1]: Finished systemd-udev-settle.service. Dec 13 13:55:29.384490 systemd-networkd[1055]: eth0: DHCPv4 address 10.0.0.14/16, gateway 10.0.0.1 acquired from 10.0.0.1 Dec 13 13:55:29.384631 systemd[1]: Starting lvm2-activation-early.service... Dec 13 13:55:29.394712 lvm[1073]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Dec 13 13:55:29.425162 systemd[1]: Finished lvm2-activation-early.service. Dec 13 13:55:29.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.425986 systemd[1]: Reached target cryptsetup.target. Dec 13 13:55:29.427726 systemd[1]: Starting lvm2-activation.service... Dec 13 13:55:29.431185 lvm[1074]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Dec 13 13:55:29.463198 systemd[1]: Finished lvm2-activation.service. Dec 13 13:55:29.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.463991 systemd[1]: Reached target local-fs-pre.target. Dec 13 13:55:29.464649 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Dec 13 13:55:29.464676 systemd[1]: Reached target local-fs.target. Dec 13 13:55:29.465235 systemd[1]: Reached target machines.target. Dec 13 13:55:29.466996 systemd[1]: Starting ldconfig.service... Dec 13 13:55:29.467910 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 13:55:29.467962 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 13:55:29.469149 systemd[1]: Starting systemd-boot-update.service... Dec 13 13:55:29.470862 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Dec 13 13:55:29.473225 systemd[1]: Starting systemd-machine-id-commit.service... Dec 13 13:55:29.475184 systemd[1]: Starting systemd-sysext.service... Dec 13 13:55:29.477662 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1076 (bootctl) Dec 13 13:55:29.481396 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Dec 13 13:55:29.484629 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Dec 13 13:55:29.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.487506 systemd[1]: Unmounting usr-share-oem.mount... Dec 13 13:55:29.495558 systemd[1]: usr-share-oem.mount: Deactivated successfully. Dec 13 13:55:29.495732 systemd[1]: Unmounted usr-share-oem.mount. Dec 13 13:55:29.543925 systemd[1]: Finished systemd-machine-id-commit.service. Dec 13 13:55:29.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.548374 kernel: loop0: detected capacity change from 0 to 194096 Dec 13 13:55:29.559407 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Dec 13 13:55:29.572625 systemd-fsck[1085]: fsck.fat 4.2 (2021-01-31) Dec 13 13:55:29.572625 systemd-fsck[1085]: /dev/vda1: 236 files, 117175/258078 clusters Dec 13 13:55:29.574644 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Dec 13 13:55:29.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.580384 kernel: loop1: detected capacity change from 0 to 194096 Dec 13 13:55:29.586989 (sd-sysext)[1089]: Using extensions 'kubernetes'. Dec 13 13:55:29.587329 (sd-sysext)[1089]: Merged extensions into '/usr'. Dec 13 13:55:29.603762 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 13:55:29.604998 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 13:55:29.607032 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 13:55:29.609021 systemd[1]: Starting modprobe@loop.service... Dec 13 13:55:29.609798 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 13:55:29.609929 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 13:55:29.610747 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 13:55:29.610874 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 13:55:29.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.612014 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 13:55:29.612123 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 13:55:29.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.613440 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 13:55:29.613561 systemd[1]: Finished modprobe@loop.service. Dec 13 13:55:29.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.614699 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 13:55:29.614801 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 13:55:29.671477 ldconfig[1075]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Dec 13 13:55:29.674782 systemd[1]: Finished ldconfig.service. Dec 13 13:55:29.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.797274 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Dec 13 13:55:29.799083 systemd[1]: Mounting boot.mount... Dec 13 13:55:29.800803 systemd[1]: Mounting usr-share-oem.mount... Dec 13 13:55:29.806728 systemd[1]: Mounted boot.mount. Dec 13 13:55:29.807489 systemd[1]: Mounted usr-share-oem.mount. Dec 13 13:55:29.809244 systemd[1]: Finished systemd-sysext.service. Dec 13 13:55:29.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.812144 systemd[1]: Starting ensure-sysext.service... Dec 13 13:55:29.813916 systemd[1]: Starting systemd-tmpfiles-setup.service... Dec 13 13:55:29.814966 systemd[1]: Finished systemd-boot-update.service. Dec 13 13:55:29.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.818808 systemd[1]: Reloading. Dec 13 13:55:29.828183 systemd-tmpfiles[1097]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Dec 13 13:55:29.830019 systemd-tmpfiles[1097]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Dec 13 13:55:29.832478 systemd-tmpfiles[1097]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Dec 13 13:55:29.860913 /usr/lib/systemd/system-generators/torcx-generator[1117]: time="2024-12-13T13:55:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 13:55:29.862719 /usr/lib/systemd/system-generators/torcx-generator[1117]: time="2024-12-13T13:55:29Z" level=info msg="torcx already run" Dec 13 13:55:29.915756 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 13:55:29.915778 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 13:55:29.931043 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 13:55:29.972000 audit: BPF prog-id=30 op=LOAD Dec 13 13:55:29.972000 audit: BPF prog-id=27 op=UNLOAD Dec 13 13:55:29.972000 audit: BPF prog-id=31 op=LOAD Dec 13 13:55:29.972000 audit: BPF prog-id=32 op=LOAD Dec 13 13:55:29.972000 audit: BPF prog-id=28 op=UNLOAD Dec 13 13:55:29.972000 audit: BPF prog-id=29 op=UNLOAD Dec 13 13:55:29.974000 audit: BPF prog-id=33 op=LOAD Dec 13 13:55:29.974000 audit: BPF prog-id=21 op=UNLOAD Dec 13 13:55:29.974000 audit: BPF prog-id=34 op=LOAD Dec 13 13:55:29.974000 audit: BPF prog-id=35 op=LOAD Dec 13 13:55:29.974000 audit: BPF prog-id=22 op=UNLOAD Dec 13 13:55:29.974000 audit: BPF prog-id=23 op=UNLOAD Dec 13 13:55:29.974000 audit: BPF prog-id=36 op=LOAD Dec 13 13:55:29.974000 audit: BPF prog-id=26 op=UNLOAD Dec 13 13:55:29.975000 audit: BPF prog-id=37 op=LOAD Dec 13 13:55:29.975000 audit: BPF prog-id=38 op=LOAD Dec 13 13:55:29.975000 audit: BPF prog-id=24 op=UNLOAD Dec 13 13:55:29.975000 audit: BPF prog-id=25 op=UNLOAD Dec 13 13:55:29.978166 systemd[1]: Finished systemd-tmpfiles-setup.service. Dec 13 13:55:29.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.982323 systemd[1]: Starting audit-rules.service... Dec 13 13:55:29.984051 systemd[1]: Starting clean-ca-certificates.service... Dec 13 13:55:29.986025 systemd[1]: Starting systemd-journal-catalog-update.service... Dec 13 13:55:29.987000 audit: BPF prog-id=39 op=LOAD Dec 13 13:55:29.988551 systemd[1]: Starting systemd-resolved.service... Dec 13 13:55:29.990000 audit: BPF prog-id=40 op=LOAD Dec 13 13:55:29.992039 systemd[1]: Starting systemd-timesyncd.service... Dec 13 13:55:29.994807 systemd[1]: Starting systemd-update-utmp.service... Dec 13 13:55:29.996053 systemd[1]: Finished clean-ca-certificates.service. Dec 13 13:55:29.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.998000 audit[1167]: SYSTEM_BOOT pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Dec 13 13:55:29.998801 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Dec 13 13:55:30.003560 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.004800 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 13:55:30.006595 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 13:55:30.009475 systemd[1]: Starting modprobe@loop.service... Dec 13 13:55:30.010103 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.010282 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 13:55:30.010463 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Dec 13 13:55:30.011744 systemd[1]: Finished systemd-journal-catalog-update.service. Dec 13 13:55:30.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.013039 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 13:55:30.013154 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 13:55:30.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.014695 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 13:55:30.014810 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 13:55:30.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.015991 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 13:55:30.016088 systemd[1]: Finished modprobe@loop.service. Dec 13 13:55:30.017235 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 13:55:30.017395 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.018609 systemd[1]: Starting systemd-update-done.service... Dec 13 13:55:30.019882 systemd[1]: Finished systemd-update-utmp.service. Dec 13 13:55:30.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.022608 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.023726 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 13:55:30.025478 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 13:55:30.027202 systemd[1]: Starting modprobe@loop.service... Dec 13 13:55:30.027934 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.028050 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 13:55:30.028140 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Dec 13 13:55:30.028956 systemd[1]: Finished systemd-update-done.service. Dec 13 13:55:30.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.030086 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 13:55:30.030202 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 13:55:30.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.031293 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 13:55:30.031426 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 13:55:30.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.032462 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 13:55:30.032574 systemd[1]: Finished modprobe@loop.service. Dec 13 13:55:30.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.033651 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 13:55:30.033755 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.036205 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.039180 systemd[1]: Starting modprobe@dm_mod.service... Dec 13 13:55:30.041154 systemd[1]: Starting modprobe@drm.service... Dec 13 13:55:30.042912 systemd[1]: Starting modprobe@efi_pstore.service... Dec 13 13:55:30.044601 systemd[1]: Starting modprobe@loop.service... Dec 13 13:55:30.045254 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.045393 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 13:55:30.046705 systemd[1]: Starting systemd-networkd-wait-online.service... Dec 13 13:55:30.047582 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Dec 13 13:55:30.048664 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Dec 13 13:55:30.048785 systemd[1]: Finished modprobe@dm_mod.service. Dec 13 13:55:30.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.049888 systemd[1]: modprobe@drm.service: Deactivated successfully. Dec 13 13:55:30.050001 systemd[1]: Finished modprobe@drm.service. Dec 13 13:55:30.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.050982 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Dec 13 13:55:30.051093 systemd[1]: Finished modprobe@efi_pstore.service. Dec 13 13:55:30.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.052155 systemd[1]: modprobe@loop.service: Deactivated successfully. Dec 13 13:55:30.052271 systemd[1]: Finished modprobe@loop.service. Dec 13 13:55:30.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.053431 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Dec 13 13:55:30.053520 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.054642 systemd[1]: Finished ensure-sysext.service. Dec 13 13:55:30.055216 systemd-timesyncd[1166]: Contacted time server 10.0.0.1:123 (10.0.0.1). Dec 13 13:55:30.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.055266 systemd-timesyncd[1166]: Initial clock synchronization to Fri 2024-12-13 13:55:29.675339 UTC. Dec 13 13:55:30.055488 systemd[1]: Started systemd-timesyncd.service. Dec 13 13:55:30.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:30.056266 systemd[1]: Reached target time-set.target. Dec 13 13:55:30.056000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Dec 13 13:55:30.056000 audit[1188]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe0ed7b90 a2=420 a3=0 items=0 ppid=1156 pid=1188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:30.056000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Dec 13 13:55:30.057182 augenrules[1188]: No rules Dec 13 13:55:30.057786 systemd[1]: Finished audit-rules.service. Dec 13 13:55:30.065872 systemd-resolved[1160]: Positive Trust Anchors: Dec 13 13:55:30.066108 systemd-resolved[1160]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Dec 13 13:55:30.066193 systemd-resolved[1160]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Dec 13 13:55:30.074507 systemd-resolved[1160]: Defaulting to hostname 'linux'. Dec 13 13:55:30.077806 systemd[1]: Started systemd-resolved.service. Dec 13 13:55:30.078480 systemd[1]: Reached target network.target. Dec 13 13:55:30.079039 systemd[1]: Reached target nss-lookup.target. Dec 13 13:55:30.079683 systemd[1]: Reached target sysinit.target. Dec 13 13:55:30.080308 systemd[1]: Started motdgen.path. Dec 13 13:55:30.080885 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Dec 13 13:55:30.081854 systemd[1]: Started logrotate.timer. Dec 13 13:55:30.082502 systemd[1]: Started mdadm.timer. Dec 13 13:55:30.083004 systemd[1]: Started systemd-tmpfiles-clean.timer. Dec 13 13:55:30.083654 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Dec 13 13:55:30.083680 systemd[1]: Reached target paths.target. Dec 13 13:55:30.084195 systemd[1]: Reached target timers.target. Dec 13 13:55:30.085059 systemd[1]: Listening on dbus.socket. Dec 13 13:55:30.086626 systemd[1]: Starting docker.socket... Dec 13 13:55:30.089525 systemd[1]: Listening on sshd.socket. Dec 13 13:55:30.090189 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 13:55:30.090676 systemd[1]: Listening on docker.socket. Dec 13 13:55:30.091327 systemd[1]: Reached target sockets.target. Dec 13 13:55:30.091936 systemd[1]: Reached target basic.target. Dec 13 13:55:30.092540 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.092572 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Dec 13 13:55:30.093539 systemd[1]: Starting containerd.service... Dec 13 13:55:30.095103 systemd[1]: Starting dbus.service... Dec 13 13:55:30.096665 systemd[1]: Starting enable-oem-cloudinit.service... Dec 13 13:55:30.098399 systemd[1]: Starting extend-filesystems.service... Dec 13 13:55:30.099122 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Dec 13 13:55:30.100488 systemd[1]: Starting motdgen.service... Dec 13 13:55:30.104930 systemd[1]: Starting prepare-helm.service... Dec 13 13:55:30.106665 systemd[1]: Starting ssh-key-proc-cmdline.service... Dec 13 13:55:30.107810 jq[1198]: false Dec 13 13:55:30.108381 systemd[1]: Starting sshd-keygen.service... Dec 13 13:55:30.112719 systemd[1]: Starting systemd-logind.service... Dec 13 13:55:30.113396 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Dec 13 13:55:30.113484 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Dec 13 13:55:30.113928 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Dec 13 13:55:30.114672 systemd[1]: Starting update-engine.service... Dec 13 13:55:30.116336 systemd[1]: Starting update-ssh-keys-after-ignition.service... Dec 13 13:55:30.119112 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Dec 13 13:55:30.119293 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Dec 13 13:55:30.120263 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Dec 13 13:55:30.120496 systemd[1]: Finished ssh-key-proc-cmdline.service. Dec 13 13:55:30.121500 jq[1214]: true Dec 13 13:55:30.126848 extend-filesystems[1199]: Found loop1 Dec 13 13:55:30.126848 extend-filesystems[1199]: Found vda Dec 13 13:55:30.128651 extend-filesystems[1199]: Found vda1 Dec 13 13:55:30.128651 extend-filesystems[1199]: Found vda2 Dec 13 13:55:30.128651 extend-filesystems[1199]: Found vda3 Dec 13 13:55:30.128651 extend-filesystems[1199]: Found usr Dec 13 13:55:30.128651 extend-filesystems[1199]: Found vda4 Dec 13 13:55:30.128651 extend-filesystems[1199]: Found vda6 Dec 13 13:55:30.128651 extend-filesystems[1199]: Found vda7 Dec 13 13:55:30.128651 extend-filesystems[1199]: Found vda9 Dec 13 13:55:30.128651 extend-filesystems[1199]: Checking size of /dev/vda9 Dec 13 13:55:30.137279 jq[1221]: true Dec 13 13:55:30.141446 tar[1219]: linux-arm64/helm Dec 13 13:55:30.144070 systemd[1]: motdgen.service: Deactivated successfully. Dec 13 13:55:30.145268 extend-filesystems[1199]: Resized partition /dev/vda9 Dec 13 13:55:30.146557 systemd[1]: Finished motdgen.service. Dec 13 13:55:30.148439 extend-filesystems[1238]: resize2fs 1.46.5 (30-Dec-2021) Dec 13 13:55:30.167410 dbus-daemon[1197]: [system] SELinux support is enabled Dec 13 13:55:30.167588 systemd[1]: Started dbus.service. Dec 13 13:55:30.169892 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Dec 13 13:55:30.169922 systemd[1]: Reached target system-config.target. Dec 13 13:55:30.170667 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Dec 13 13:55:30.170689 systemd[1]: Reached target user-config.target. Dec 13 13:55:30.171291 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Dec 13 13:55:30.199658 update_engine[1213]: I1213 13:55:30.199450 1213 main.cc:92] Flatcar Update Engine starting Dec 13 13:55:30.202175 systemd-logind[1209]: Watching system buttons on /dev/input/event0 (Power Button) Dec 13 13:55:30.203334 systemd-logind[1209]: New seat seat0. Dec 13 13:55:30.207874 systemd[1]: Started update-engine.service. Dec 13 13:55:30.208860 bash[1242]: Updated "/home/core/.ssh/authorized_keys" Dec 13 13:55:30.209044 systemd[1]: Started systemd-logind.service. Dec 13 13:55:30.210286 systemd[1]: Finished update-ssh-keys-after-ignition.service. Dec 13 13:55:30.210434 update_engine[1213]: I1213 13:55:30.210389 1213 update_check_scheduler.cc:74] Next update check in 2m31s Dec 13 13:55:30.211395 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Dec 13 13:55:30.213457 systemd[1]: Started locksmithd.service. Dec 13 13:55:30.230130 extend-filesystems[1238]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Dec 13 13:55:30.230130 extend-filesystems[1238]: old_desc_blocks = 1, new_desc_blocks = 1 Dec 13 13:55:30.230130 extend-filesystems[1238]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Dec 13 13:55:30.233537 extend-filesystems[1199]: Resized filesystem in /dev/vda9 Dec 13 13:55:30.230888 systemd[1]: extend-filesystems.service: Deactivated successfully. Dec 13 13:55:30.231053 systemd[1]: Finished extend-filesystems.service. Dec 13 13:55:30.235302 env[1220]: time="2024-12-13T13:55:30.235254080Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Dec 13 13:55:30.254520 env[1220]: time="2024-12-13T13:55:30.253694240Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Dec 13 13:55:30.254520 env[1220]: time="2024-12-13T13:55:30.253895920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Dec 13 13:55:30.256151 env[1220]: time="2024-12-13T13:55:30.256114320Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.173-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Dec 13 13:55:30.256151 env[1220]: time="2024-12-13T13:55:30.256145680Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Dec 13 13:55:30.256721 env[1220]: time="2024-12-13T13:55:30.256675040Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Dec 13 13:55:30.256721 env[1220]: time="2024-12-13T13:55:30.256698960Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Dec 13 13:55:30.256861 env[1220]: time="2024-12-13T13:55:30.256712960Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Dec 13 13:55:30.256861 env[1220]: time="2024-12-13T13:55:30.256848240Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Dec 13 13:55:30.256967 env[1220]: time="2024-12-13T13:55:30.256946120Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Dec 13 13:55:30.257510 env[1220]: time="2024-12-13T13:55:30.257477640Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Dec 13 13:55:30.257855 env[1220]: time="2024-12-13T13:55:30.257721080Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Dec 13 13:55:30.257855 env[1220]: time="2024-12-13T13:55:30.257803600Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Dec 13 13:55:30.257943 env[1220]: time="2024-12-13T13:55:30.257921200Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Dec 13 13:55:30.257993 env[1220]: time="2024-12-13T13:55:30.257942680Z" level=info msg="metadata content store policy set" policy=shared Dec 13 13:55:30.263937 env[1220]: time="2024-12-13T13:55:30.263903280Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Dec 13 13:55:30.263937 env[1220]: time="2024-12-13T13:55:30.263939120Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Dec 13 13:55:30.264057 env[1220]: time="2024-12-13T13:55:30.263955360Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Dec 13 13:55:30.264057 env[1220]: time="2024-12-13T13:55:30.263985880Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.264057 env[1220]: time="2024-12-13T13:55:30.264000320Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.264057 env[1220]: time="2024-12-13T13:55:30.264014800Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.264057 env[1220]: time="2024-12-13T13:55:30.264028120Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264395200Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264419000Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264434000Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264447720Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264460120Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264576840Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264655160Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264863760Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264896200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.264920760Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.265074320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.265087240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.265099280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266298 env[1220]: time="2024-12-13T13:55:30.265111280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265126480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265139040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265151120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265163360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265176120Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265302640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265343640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265368280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265381920Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265395240Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265405800Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265422960Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Dec 13 13:55:30.266696 env[1220]: time="2024-12-13T13:55:30.265456120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Dec 13 13:55:30.266948 env[1220]: time="2024-12-13T13:55:30.265663160Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Dec 13 13:55:30.266948 env[1220]: time="2024-12-13T13:55:30.265714440Z" level=info msg="Connect containerd service" Dec 13 13:55:30.266948 env[1220]: time="2024-12-13T13:55:30.265748680Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Dec 13 13:55:30.266948 env[1220]: time="2024-12-13T13:55:30.266574600Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267049440Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267095280Z" level=info msg=serving... address=/run/containerd/containerd.sock Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267197760Z" level=info msg="containerd successfully booted in 0.032584s" Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267338040Z" level=info msg="Start subscribing containerd event" Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267824000Z" level=info msg="Start recovering state" Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267898560Z" level=info msg="Start event monitor" Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267917720Z" level=info msg="Start snapshots syncer" Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267931840Z" level=info msg="Start cni network conf syncer for default" Dec 13 13:55:30.268575 env[1220]: time="2024-12-13T13:55:30.267939880Z" level=info msg="Start streaming server" Dec 13 13:55:30.267283 systemd[1]: Started containerd.service. Dec 13 13:55:30.288185 locksmithd[1250]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Dec 13 13:55:30.531427 tar[1219]: linux-arm64/LICENSE Dec 13 13:55:30.531531 tar[1219]: linux-arm64/README.md Dec 13 13:55:30.535653 systemd[1]: Finished prepare-helm.service. Dec 13 13:55:30.765587 systemd-networkd[1055]: eth0: Gained IPv6LL Dec 13 13:55:30.767164 systemd[1]: Finished systemd-networkd-wait-online.service. Dec 13 13:55:30.768276 systemd[1]: Reached target network-online.target. Dec 13 13:55:30.770567 systemd[1]: Starting kubelet.service... Dec 13 13:55:31.272349 systemd[1]: Started kubelet.service. Dec 13 13:55:31.512604 sshd_keygen[1218]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Dec 13 13:55:31.529275 systemd[1]: Finished sshd-keygen.service. Dec 13 13:55:31.531364 systemd[1]: Starting issuegen.service... Dec 13 13:55:31.536019 systemd[1]: issuegen.service: Deactivated successfully. Dec 13 13:55:31.536175 systemd[1]: Finished issuegen.service. Dec 13 13:55:31.538165 systemd[1]: Starting systemd-user-sessions.service... Dec 13 13:55:31.544055 systemd[1]: Finished systemd-user-sessions.service. Dec 13 13:55:31.546204 systemd[1]: Started getty@tty1.service. Dec 13 13:55:31.548152 systemd[1]: Started serial-getty@ttyAMA0.service. Dec 13 13:55:31.549061 systemd[1]: Reached target getty.target. Dec 13 13:55:31.549732 systemd[1]: Reached target multi-user.target. Dec 13 13:55:31.551528 systemd[1]: Starting systemd-update-utmp-runlevel.service... Dec 13 13:55:31.558311 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Dec 13 13:55:31.558479 systemd[1]: Finished systemd-update-utmp-runlevel.service. Dec 13 13:55:31.559339 systemd[1]: Startup finished in 603ms (kernel) + 4.252s (initrd) + 4.736s (userspace) = 9.592s. Dec 13 13:55:31.759597 kubelet[1265]: E1213 13:55:31.759548 1265 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 13:55:31.761572 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 13:55:31.761688 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 13:55:34.649195 systemd[1]: Created slice system-sshd.slice. Dec 13 13:55:34.650252 systemd[1]: Started sshd@0-10.0.0.14:22-10.0.0.1:37492.service. Dec 13 13:55:34.693059 sshd[1288]: Accepted publickey for core from 10.0.0.1 port 37492 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:55:34.695190 sshd[1288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:34.702505 systemd[1]: Created slice user-500.slice. Dec 13 13:55:34.703483 systemd[1]: Starting user-runtime-dir@500.service... Dec 13 13:55:34.705222 systemd-logind[1209]: New session 1 of user core. Dec 13 13:55:34.710913 systemd[1]: Finished user-runtime-dir@500.service. Dec 13 13:55:34.712099 systemd[1]: Starting user@500.service... Dec 13 13:55:34.714489 (systemd)[1291]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:34.770199 systemd[1291]: Queued start job for default target default.target. Dec 13 13:55:34.770620 systemd[1291]: Reached target paths.target. Dec 13 13:55:34.770638 systemd[1291]: Reached target sockets.target. Dec 13 13:55:34.770650 systemd[1291]: Reached target timers.target. Dec 13 13:55:34.770660 systemd[1291]: Reached target basic.target. Dec 13 13:55:34.770707 systemd[1291]: Reached target default.target. Dec 13 13:55:34.770733 systemd[1291]: Startup finished in 51ms. Dec 13 13:55:34.770756 systemd[1]: Started user@500.service. Dec 13 13:55:34.771538 systemd[1]: Started session-1.scope. Dec 13 13:55:34.819655 systemd[1]: Started sshd@1-10.0.0.14:22-10.0.0.1:37508.service. Dec 13 13:55:34.858054 sshd[1300]: Accepted publickey for core from 10.0.0.1 port 37508 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:55:34.859153 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:34.862830 systemd-logind[1209]: New session 2 of user core. Dec 13 13:55:34.863823 systemd[1]: Started session-2.scope. Dec 13 13:55:34.916631 sshd[1300]: pam_unix(sshd:session): session closed for user core Dec 13 13:55:34.919854 systemd[1]: Started sshd@2-10.0.0.14:22-10.0.0.1:37510.service. Dec 13 13:55:34.920287 systemd[1]: sshd@1-10.0.0.14:22-10.0.0.1:37508.service: Deactivated successfully. Dec 13 13:55:34.920928 systemd[1]: session-2.scope: Deactivated successfully. Dec 13 13:55:34.921428 systemd-logind[1209]: Session 2 logged out. Waiting for processes to exit. Dec 13 13:55:34.922219 systemd-logind[1209]: Removed session 2. Dec 13 13:55:34.957959 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 37510 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:55:34.959165 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:34.961939 systemd-logind[1209]: New session 3 of user core. Dec 13 13:55:34.962618 systemd[1]: Started session-3.scope. Dec 13 13:55:35.010455 sshd[1305]: pam_unix(sshd:session): session closed for user core Dec 13 13:55:35.014012 systemd[1]: sshd@2-10.0.0.14:22-10.0.0.1:37510.service: Deactivated successfully. Dec 13 13:55:35.014506 systemd[1]: session-3.scope: Deactivated successfully. Dec 13 13:55:35.015001 systemd-logind[1209]: Session 3 logged out. Waiting for processes to exit. Dec 13 13:55:35.015915 systemd[1]: Started sshd@3-10.0.0.14:22-10.0.0.1:37516.service. Dec 13 13:55:35.016583 systemd-logind[1209]: Removed session 3. Dec 13 13:55:35.053991 sshd[1313]: Accepted publickey for core from 10.0.0.1 port 37516 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:55:35.054987 sshd[1313]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:35.057683 systemd-logind[1209]: New session 4 of user core. Dec 13 13:55:35.058410 systemd[1]: Started session-4.scope. Dec 13 13:55:35.109133 sshd[1313]: pam_unix(sshd:session): session closed for user core Dec 13 13:55:35.112746 systemd[1]: sshd@3-10.0.0.14:22-10.0.0.1:37516.service: Deactivated successfully. Dec 13 13:55:35.113254 systemd[1]: session-4.scope: Deactivated successfully. Dec 13 13:55:35.113753 systemd-logind[1209]: Session 4 logged out. Waiting for processes to exit. Dec 13 13:55:35.114697 systemd[1]: Started sshd@4-10.0.0.14:22-10.0.0.1:37528.service. Dec 13 13:55:35.115366 systemd-logind[1209]: Removed session 4. Dec 13 13:55:35.152841 sshd[1319]: Accepted publickey for core from 10.0.0.1 port 37528 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:55:35.153841 sshd[1319]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:35.156710 systemd-logind[1209]: New session 5 of user core. Dec 13 13:55:35.157417 systemd[1]: Started session-5.scope. Dec 13 13:55:35.214800 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Dec 13 13:55:35.215649 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 13:55:35.227541 dbus-daemon[1197]: avc: received setenforce notice (enforcing=1) Dec 13 13:55:35.229236 sudo[1322]: pam_unix(sudo:session): session closed for user root Dec 13 13:55:35.230934 sshd[1319]: pam_unix(sshd:session): session closed for user core Dec 13 13:55:35.234040 systemd[1]: sshd@4-10.0.0.14:22-10.0.0.1:37528.service: Deactivated successfully. Dec 13 13:55:35.234582 systemd[1]: session-5.scope: Deactivated successfully. Dec 13 13:55:35.235103 systemd-logind[1209]: Session 5 logged out. Waiting for processes to exit. Dec 13 13:55:35.236106 systemd[1]: Started sshd@5-10.0.0.14:22-10.0.0.1:37530.service. Dec 13 13:55:35.236779 systemd-logind[1209]: Removed session 5. Dec 13 13:55:35.276646 sshd[1326]: Accepted publickey for core from 10.0.0.1 port 37530 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:55:35.277956 sshd[1326]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:35.281781 systemd-logind[1209]: New session 6 of user core. Dec 13 13:55:35.282181 systemd[1]: Started session-6.scope. Dec 13 13:55:35.332989 sudo[1330]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Dec 13 13:55:35.333200 sudo[1330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 13:55:35.335522 sudo[1330]: pam_unix(sudo:session): session closed for user root Dec 13 13:55:35.339319 sudo[1329]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Dec 13 13:55:35.339543 sudo[1329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 13:55:35.347149 systemd[1]: Stopping audit-rules.service... Dec 13 13:55:35.347000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Dec 13 13:55:35.348289 auditctl[1333]: No rules Dec 13 13:55:35.348563 systemd[1]: audit-rules.service: Deactivated successfully. Dec 13 13:55:35.348713 systemd[1]: Stopped audit-rules.service. Dec 13 13:55:35.348878 kernel: kauditd_printk_skb: 135 callbacks suppressed Dec 13 13:55:35.348904 kernel: audit: type=1305 audit(1734098135.347:215): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Dec 13 13:55:35.350040 systemd[1]: Starting audit-rules.service... Dec 13 13:55:35.347000 audit[1333]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdf87f6e0 a2=420 a3=0 items=0 ppid=1 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.355025 kernel: audit: type=1300 audit(1734098135.347:215): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdf87f6e0 a2=420 a3=0 items=0 ppid=1 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.355083 kernel: audit: type=1327 audit(1734098135.347:215): proctitle=2F7362696E2F617564697463746C002D44 Dec 13 13:55:35.347000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Dec 13 13:55:35.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.357965 kernel: audit: type=1131 audit(1734098135.348:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.365081 augenrules[1350]: No rules Dec 13 13:55:35.365805 systemd[1]: Finished audit-rules.service. Dec 13 13:55:35.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.366521 sudo[1329]: pam_unix(sudo:session): session closed for user root Dec 13 13:55:35.367690 sshd[1326]: pam_unix(sshd:session): session closed for user core Dec 13 13:55:35.365000 audit[1329]: USER_END pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.369786 systemd[1]: sshd@5-10.0.0.14:22-10.0.0.1:37530.service: Deactivated successfully. Dec 13 13:55:35.370276 systemd[1]: session-6.scope: Deactivated successfully. Dec 13 13:55:35.371185 systemd-logind[1209]: Session 6 logged out. Waiting for processes to exit. Dec 13 13:55:35.371608 kernel: audit: type=1130 audit(1734098135.364:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.371638 kernel: audit: type=1106 audit(1734098135.365:218): pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.371653 kernel: audit: type=1104 audit(1734098135.365:219): pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.365000 audit[1329]: CRED_DISP pid=1329 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.372064 systemd[1]: Started sshd@6-10.0.0.14:22-10.0.0.1:37544.service. Dec 13 13:55:35.372698 systemd-logind[1209]: Removed session 6. Dec 13 13:55:35.374171 kernel: audit: type=1106 audit(1734098135.367:220): pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.367000 audit[1326]: USER_END pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.367000 audit[1326]: CRED_DISP pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.380186 kernel: audit: type=1104 audit(1734098135.367:221): pid=1326 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.380227 kernel: audit: type=1131 audit(1734098135.368:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.14:22-10.0.0.1:37530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.14:22-10.0.0.1:37530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.14:22-10.0.0.1:37544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.411000 audit[1356]: USER_ACCT pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.412468 sshd[1356]: Accepted publickey for core from 10.0.0.1 port 37544 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:55:35.412000 audit[1356]: CRED_ACQ pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.413000 audit[1356]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedd25b00 a2=3 a3=1 items=0 ppid=1 pid=1356 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.413000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:55:35.413848 sshd[1356]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:55:35.417171 systemd-logind[1209]: New session 7 of user core. Dec 13 13:55:35.417957 systemd[1]: Started session-7.scope. Dec 13 13:55:35.421000 audit[1356]: USER_START pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.422000 audit[1358]: CRED_ACQ pid=1358 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:55:35.466000 audit[1359]: USER_ACCT pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.468279 sudo[1359]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Dec 13 13:55:35.468527 sudo[1359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Dec 13 13:55:35.467000 audit[1359]: CRED_REFR pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.469000 audit[1359]: USER_START pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.525290 systemd[1]: Starting docker.service... Dec 13 13:55:35.612994 env[1371]: time="2024-12-13T13:55:35.612919763Z" level=info msg="Starting up" Dec 13 13:55:35.614513 env[1371]: time="2024-12-13T13:55:35.614484140Z" level=info msg="parsed scheme: \"unix\"" module=grpc Dec 13 13:55:35.614595 env[1371]: time="2024-12-13T13:55:35.614580851Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Dec 13 13:55:35.614660 env[1371]: time="2024-12-13T13:55:35.614644742Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Dec 13 13:55:35.614727 env[1371]: time="2024-12-13T13:55:35.614713611Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Dec 13 13:55:35.616659 env[1371]: time="2024-12-13T13:55:35.616627736Z" level=info msg="parsed scheme: \"unix\"" module=grpc Dec 13 13:55:35.616659 env[1371]: time="2024-12-13T13:55:35.616650368Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Dec 13 13:55:35.616749 env[1371]: time="2024-12-13T13:55:35.616674789Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Dec 13 13:55:35.616749 env[1371]: time="2024-12-13T13:55:35.616687038Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Dec 13 13:55:35.733475 env[1371]: time="2024-12-13T13:55:35.733372519Z" level=info msg="Loading containers: start." Dec 13 13:55:35.777000 audit[1405]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.777000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc4584dc0 a2=0 a3=1 items=0 ppid=1371 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.777000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Dec 13 13:55:35.779000 audit[1407]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.779000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffefc43de0 a2=0 a3=1 items=0 ppid=1371 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.779000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Dec 13 13:55:35.780000 audit[1409]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.780000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe1214760 a2=0 a3=1 items=0 ppid=1371 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.780000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Dec 13 13:55:35.782000 audit[1411]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.782000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff8685eb0 a2=0 a3=1 items=0 ppid=1371 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.782000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Dec 13 13:55:35.788000 audit[1413]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.788000 audit[1413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff7346950 a2=0 a3=1 items=0 ppid=1371 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.788000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Dec 13 13:55:35.812000 audit[1418]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.812000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcc788510 a2=0 a3=1 items=0 ppid=1371 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.812000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Dec 13 13:55:35.818000 audit[1420]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.818000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe99c0f60 a2=0 a3=1 items=0 ppid=1371 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.818000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Dec 13 13:55:35.819000 audit[1422]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.819000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc8a8cb90 a2=0 a3=1 items=0 ppid=1371 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.819000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Dec 13 13:55:35.821000 audit[1424]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.821000 audit[1424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffebf78780 a2=0 a3=1 items=0 ppid=1371 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.821000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Dec 13 13:55:35.827000 audit[1428]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.827000 audit[1428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc6907210 a2=0 a3=1 items=0 ppid=1371 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.827000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Dec 13 13:55:35.841000 audit[1429]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.841000 audit[1429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffebc9f460 a2=0 a3=1 items=0 ppid=1371 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.841000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Dec 13 13:55:35.850400 kernel: Initializing XFRM netlink socket Dec 13 13:55:35.873176 env[1371]: time="2024-12-13T13:55:35.873127243Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Dec 13 13:55:35.888000 audit[1437]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.888000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffefc32120 a2=0 a3=1 items=0 ppid=1371 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Dec 13 13:55:35.899000 audit[1440]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.899000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd026b280 a2=0 a3=1 items=0 ppid=1371 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.899000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Dec 13 13:55:35.902000 audit[1443]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.902000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc0cd5ab0 a2=0 a3=1 items=0 ppid=1371 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Dec 13 13:55:35.904000 audit[1445]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.904000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd79b9710 a2=0 a3=1 items=0 ppid=1371 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.904000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Dec 13 13:55:35.906000 audit[1447]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.906000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe4263bd0 a2=0 a3=1 items=0 ppid=1371 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.906000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Dec 13 13:55:35.908000 audit[1449]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.908000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffcddfa550 a2=0 a3=1 items=0 ppid=1371 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.908000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Dec 13 13:55:35.910000 audit[1451]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.910000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcaa7fb90 a2=0 a3=1 items=0 ppid=1371 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.910000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Dec 13 13:55:35.915000 audit[1454]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.915000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc1001780 a2=0 a3=1 items=0 ppid=1371 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.915000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Dec 13 13:55:35.917000 audit[1456]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.917000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffddf315d0 a2=0 a3=1 items=0 ppid=1371 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.917000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Dec 13 13:55:35.918000 audit[1458]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.918000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffddf18e50 a2=0 a3=1 items=0 ppid=1371 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.918000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Dec 13 13:55:35.920000 audit[1460]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.920000 audit[1460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe6c3c040 a2=0 a3=1 items=0 ppid=1371 pid=1460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Dec 13 13:55:35.922085 systemd-networkd[1055]: docker0: Link UP Dec 13 13:55:35.927000 audit[1464]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1464 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.927000 audit[1464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd52e85b0 a2=0 a3=1 items=0 ppid=1371 pid=1464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.927000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Dec 13 13:55:35.934000 audit[1465]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1465 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:35.934000 audit[1465]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd7abde70 a2=0 a3=1 items=0 ppid=1371 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:35.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Dec 13 13:55:35.935471 env[1371]: time="2024-12-13T13:55:35.935437351Z" level=info msg="Loading containers: done." Dec 13 13:55:35.951849 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck252409765-merged.mount: Deactivated successfully. Dec 13 13:55:35.959073 env[1371]: time="2024-12-13T13:55:35.959032695Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Dec 13 13:55:35.959214 env[1371]: time="2024-12-13T13:55:35.959187853Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Dec 13 13:55:35.959299 env[1371]: time="2024-12-13T13:55:35.959277954Z" level=info msg="Daemon has completed initialization" Dec 13 13:55:35.971633 systemd[1]: Started docker.service. Dec 13 13:55:35.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:35.978562 env[1371]: time="2024-12-13T13:55:35.978518481Z" level=info msg="API listen on /run/docker.sock" Dec 13 13:55:36.611934 env[1220]: time="2024-12-13T13:55:36.611867051Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.8\"" Dec 13 13:55:37.246936 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3186530277.mount: Deactivated successfully. Dec 13 13:55:38.770629 env[1220]: time="2024-12-13T13:55:38.770583401Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:38.772045 env[1220]: time="2024-12-13T13:55:38.772011038Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8202e87ffef091fe4f11dd113ff6f2ab16c70279775d224ddd8aa95e2dd0b966,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:38.773616 env[1220]: time="2024-12-13T13:55:38.773591296Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:38.775905 env[1220]: time="2024-12-13T13:55:38.775870437Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:f0e1b3de0c2e98e6c6abd73edf9d3b8e4d44460656cde0ebb92e2d9206961fcb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:38.776688 env[1220]: time="2024-12-13T13:55:38.776660193Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.8\" returns image reference \"sha256:8202e87ffef091fe4f11dd113ff6f2ab16c70279775d224ddd8aa95e2dd0b966\"" Dec 13 13:55:38.785421 env[1220]: time="2024-12-13T13:55:38.785391200Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.8\"" Dec 13 13:55:40.467811 env[1220]: time="2024-12-13T13:55:40.467767831Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:40.469131 env[1220]: time="2024-12-13T13:55:40.469104042Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b2191aa4d4d6ca9fbd7704b35401bfa6b0b90de75db22c425053e97fd5c8338,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:40.471576 env[1220]: time="2024-12-13T13:55:40.471540756Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:40.473160 env[1220]: time="2024-12-13T13:55:40.473135147Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:124f66b7e877eb5a80a40503057299bb60e6a5f2130905f4e3293dabf194c397,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:40.473957 env[1220]: time="2024-12-13T13:55:40.473933388Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.8\" returns image reference \"sha256:4b2191aa4d4d6ca9fbd7704b35401bfa6b0b90de75db22c425053e97fd5c8338\"" Dec 13 13:55:40.485369 env[1220]: time="2024-12-13T13:55:40.485315800Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.8\"" Dec 13 13:55:41.699906 env[1220]: time="2024-12-13T13:55:41.699855136Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:41.702254 env[1220]: time="2024-12-13T13:55:41.702222474Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d43326c1723208785a33cdc1507082792eb041ca0d789c103c90180e31f65ca8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:41.704522 env[1220]: time="2024-12-13T13:55:41.704497263Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:41.705675 env[1220]: time="2024-12-13T13:55:41.705653913Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:c8bdeac2590c99c1a77e33995423ddb6633ff90a82a2aa455442e0a8079ef8c7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:41.706691 env[1220]: time="2024-12-13T13:55:41.706581185Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.8\" returns image reference \"sha256:d43326c1723208785a33cdc1507082792eb041ca0d789c103c90180e31f65ca8\"" Dec 13 13:55:41.716974 env[1220]: time="2024-12-13T13:55:41.716936729Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.8\"" Dec 13 13:55:42.012456 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Dec 13 13:55:42.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:42.012614 systemd[1]: Stopped kubelet.service. Dec 13 13:55:42.015817 kernel: kauditd_printk_skb: 84 callbacks suppressed Dec 13 13:55:42.015903 kernel: audit: type=1130 audit(1734098142.011:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:42.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:42.016176 systemd[1]: Starting kubelet.service... Dec 13 13:55:42.020083 kernel: audit: type=1131 audit(1734098142.011:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:42.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:42.101532 systemd[1]: Started kubelet.service. Dec 13 13:55:42.104378 kernel: audit: type=1130 audit(1734098142.100:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:42.155646 kubelet[1534]: E1213 13:55:42.155599 1534 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 13:55:42.158726 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 13:55:42.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 13:55:42.158839 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 13:55:42.162373 kernel: audit: type=1131 audit(1734098142.158:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 13:55:43.033725 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4249248030.mount: Deactivated successfully. Dec 13 13:55:43.564511 env[1220]: time="2024-12-13T13:55:43.564456213Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:43.566672 env[1220]: time="2024-12-13T13:55:43.566633035Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4612aebc0675831aedbbde7cd56b85db91f1fdcf05ef923072961538ec497adb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:43.571032 env[1220]: time="2024-12-13T13:55:43.571004588Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.30.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:43.572921 env[1220]: time="2024-12-13T13:55:43.572892481Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:f6d6be9417e22af78905000ac4fd134896bacd2188ea63c7cac8edd7a5d7e9b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:43.573432 env[1220]: time="2024-12-13T13:55:43.573407627Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.8\" returns image reference \"sha256:4612aebc0675831aedbbde7cd56b85db91f1fdcf05ef923072961538ec497adb\"" Dec 13 13:55:43.582760 env[1220]: time="2024-12-13T13:55:43.582725979Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Dec 13 13:55:44.114861 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1269374302.mount: Deactivated successfully. Dec 13 13:55:44.989005 env[1220]: time="2024-12-13T13:55:44.988955442Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:44.990406 env[1220]: time="2024-12-13T13:55:44.990378515Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:44.992136 env[1220]: time="2024-12-13T13:55:44.992107803Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:44.994314 env[1220]: time="2024-12-13T13:55:44.994288007Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:44.995070 env[1220]: time="2024-12-13T13:55:44.995019554Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93\"" Dec 13 13:55:45.005373 env[1220]: time="2024-12-13T13:55:45.005071118Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Dec 13 13:55:45.425688 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1884606072.mount: Deactivated successfully. Dec 13 13:55:45.429893 env[1220]: time="2024-12-13T13:55:45.429850999Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:45.431345 env[1220]: time="2024-12-13T13:55:45.431310236Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:45.432855 env[1220]: time="2024-12-13T13:55:45.432819743Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:45.434242 env[1220]: time="2024-12-13T13:55:45.434208461Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:45.434824 env[1220]: time="2024-12-13T13:55:45.434783976Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Dec 13 13:55:45.443634 env[1220]: time="2024-12-13T13:55:45.443606268Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\"" Dec 13 13:55:46.145399 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1523899253.mount: Deactivated successfully. Dec 13 13:55:48.912432 env[1220]: time="2024-12-13T13:55:48.912383034Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:48.913876 env[1220]: time="2024-12-13T13:55:48.913851516Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:014faa467e29798aeef733fe6d1a3b5e382688217b053ad23410e6cccd5d22fd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:48.916363 env[1220]: time="2024-12-13T13:55:48.916324288Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:48.918176 env[1220]: time="2024-12-13T13:55:48.918150527Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:44a8e24dcbba3470ee1fee21d5e88d128c936e9b55d4bc51fbef8086f8ed123b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:48.919107 env[1220]: time="2024-12-13T13:55:48.919080383Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\" returns image reference \"sha256:014faa467e29798aeef733fe6d1a3b5e382688217b053ad23410e6cccd5d22fd\"" Dec 13 13:55:52.372515 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Dec 13 13:55:52.372688 systemd[1]: Stopped kubelet.service. Dec 13 13:55:52.378456 kernel: audit: type=1130 audit(1734098152.371:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:52.378546 kernel: audit: type=1131 audit(1734098152.371:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:52.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:52.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:52.374047 systemd[1]: Starting kubelet.service... Dec 13 13:55:52.457824 systemd[1]: Started kubelet.service. Dec 13 13:55:52.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:52.461386 kernel: audit: type=1130 audit(1734098152.456:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:52.492261 kubelet[1643]: E1213 13:55:52.492222 1643 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Dec 13 13:55:52.494093 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Dec 13 13:55:52.494221 systemd[1]: kubelet.service: Failed with result 'exit-code'. Dec 13 13:55:52.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 13:55:52.497372 kernel: audit: type=1131 audit(1734098152.493:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Dec 13 13:55:55.321258 systemd[1]: Stopped kubelet.service. Dec 13 13:55:55.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:55.323255 systemd[1]: Starting kubelet.service... Dec 13 13:55:55.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:55.326737 kernel: audit: type=1130 audit(1734098155.320:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:55.326801 kernel: audit: type=1131 audit(1734098155.320:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:55.340469 systemd[1]: Reloading. Dec 13 13:55:55.392456 /usr/lib/systemd/system-generators/torcx-generator[1677]: time="2024-12-13T13:55:55Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 13:55:55.395431 /usr/lib/systemd/system-generators/torcx-generator[1677]: time="2024-12-13T13:55:55Z" level=info msg="torcx already run" Dec 13 13:55:55.488558 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 13:55:55.488743 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 13:55:55.504263 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.558475 kernel: audit: type=1400 audit(1734098155.552:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.558543 kernel: audit: type=1400 audit(1734098155.552:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.558569 kernel: audit: type=1400 audit(1734098155.552:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.560785 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.552000 audit: BPF prog-id=46 op=LOAD Dec 13 13:55:55.552000 audit: BPF prog-id=39 op=UNLOAD Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit: BPF prog-id=47 op=LOAD Dec 13 13:55:55.553000 audit: BPF prog-id=30 op=UNLOAD Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit: BPF prog-id=48 op=LOAD Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.553000 audit: BPF prog-id=49 op=LOAD Dec 13 13:55:55.553000 audit: BPF prog-id=31 op=UNLOAD Dec 13 13:55:55.553000 audit: BPF prog-id=32 op=UNLOAD Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.555000 audit: BPF prog-id=50 op=LOAD Dec 13 13:55:55.555000 audit: BPF prog-id=41 op=UNLOAD Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.558000 audit: BPF prog-id=51 op=LOAD Dec 13 13:55:55.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.561000 audit: BPF prog-id=52 op=LOAD Dec 13 13:55:55.561000 audit: BPF prog-id=42 op=UNLOAD Dec 13 13:55:55.561000 audit: BPF prog-id=43 op=UNLOAD Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit: BPF prog-id=53 op=LOAD Dec 13 13:55:55.563000 audit: BPF prog-id=44 op=UNLOAD Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit: BPF prog-id=54 op=LOAD Dec 13 13:55:55.564000 audit: BPF prog-id=33 op=UNLOAD Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit: BPF prog-id=55 op=LOAD Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.564000 audit: BPF prog-id=56 op=LOAD Dec 13 13:55:55.564000 audit: BPF prog-id=34 op=UNLOAD Dec 13 13:55:55.564000 audit: BPF prog-id=35 op=UNLOAD Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.565000 audit: BPF prog-id=57 op=LOAD Dec 13 13:55:55.565000 audit: BPF prog-id=36 op=UNLOAD Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit: BPF prog-id=58 op=LOAD Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit: BPF prog-id=59 op=LOAD Dec 13 13:55:55.567000 audit: BPF prog-id=37 op=UNLOAD Dec 13 13:55:55.567000 audit: BPF prog-id=38 op=UNLOAD Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:55.567000 audit: BPF prog-id=60 op=LOAD Dec 13 13:55:55.567000 audit: BPF prog-id=40 op=UNLOAD Dec 13 13:55:55.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:55.575950 systemd[1]: Started kubelet.service. Dec 13 13:55:55.579872 systemd[1]: Stopping kubelet.service... Dec 13 13:55:55.580559 systemd[1]: kubelet.service: Deactivated successfully. Dec 13 13:55:55.580847 systemd[1]: Stopped kubelet.service. Dec 13 13:55:55.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:55.583083 systemd[1]: Starting kubelet.service... Dec 13 13:55:55.661250 systemd[1]: Started kubelet.service. Dec 13 13:55:55.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:55:55.699411 kubelet[1727]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 13:55:55.699411 kubelet[1727]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Dec 13 13:55:55.699411 kubelet[1727]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 13:55:55.699741 kubelet[1727]: I1213 13:55:55.699501 1727 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Dec 13 13:55:56.411856 kubelet[1727]: I1213 13:55:56.411806 1727 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Dec 13 13:55:56.411856 kubelet[1727]: I1213 13:55:56.411840 1727 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Dec 13 13:55:56.412099 kubelet[1727]: I1213 13:55:56.412072 1727 server.go:927] "Client rotation is on, will bootstrap in background" Dec 13 13:55:56.429832 kubelet[1727]: E1213 13:55:56.429792 1727 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.14:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.429960 kubelet[1727]: I1213 13:55:56.429932 1727 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Dec 13 13:55:56.439490 kubelet[1727]: I1213 13:55:56.439452 1727 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Dec 13 13:55:56.440697 kubelet[1727]: I1213 13:55:56.440654 1727 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Dec 13 13:55:56.440852 kubelet[1727]: I1213 13:55:56.440696 1727 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Dec 13 13:55:56.440946 kubelet[1727]: I1213 13:55:56.440914 1727 topology_manager.go:138] "Creating topology manager with none policy" Dec 13 13:55:56.440946 kubelet[1727]: I1213 13:55:56.440929 1727 container_manager_linux.go:301] "Creating device plugin manager" Dec 13 13:55:56.441193 kubelet[1727]: I1213 13:55:56.441169 1727 state_mem.go:36] "Initialized new in-memory state store" Dec 13 13:55:56.442118 kubelet[1727]: I1213 13:55:56.442100 1727 kubelet.go:400] "Attempting to sync node with API server" Dec 13 13:55:56.442156 kubelet[1727]: I1213 13:55:56.442120 1727 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Dec 13 13:55:56.442324 kubelet[1727]: I1213 13:55:56.442294 1727 kubelet.go:312] "Adding apiserver pod source" Dec 13 13:55:56.442530 kubelet[1727]: I1213 13:55:56.442452 1727 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Dec 13 13:55:56.443181 kubelet[1727]: W1213 13:55:56.443135 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.443239 kubelet[1727]: E1213 13:55:56.443191 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.443239 kubelet[1727]: W1213 13:55:56.443138 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.14:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.443239 kubelet[1727]: E1213 13:55:56.443214 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.14:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.443587 kubelet[1727]: I1213 13:55:56.443563 1727 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Dec 13 13:55:56.443915 kubelet[1727]: I1213 13:55:56.443889 1727 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Dec 13 13:55:56.444008 kubelet[1727]: W1213 13:55:56.443997 1727 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Dec 13 13:55:56.444741 kubelet[1727]: I1213 13:55:56.444721 1727 server.go:1264] "Started kubelet" Dec 13 13:55:56.444972 kubelet[1727]: I1213 13:55:56.444945 1727 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Dec 13 13:55:56.445628 kubelet[1727]: I1213 13:55:56.445130 1727 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Dec 13 13:55:56.445811 kubelet[1727]: I1213 13:55:56.445793 1727 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Dec 13 13:55:56.451197 kubelet[1727]: I1213 13:55:56.449869 1727 server.go:455] "Adding debug handlers to kubelet server" Dec 13 13:55:56.450000 audit[1727]: AVC avc: denied { mac_admin } for pid=1727 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:56.450000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 13:55:56.450000 audit[1727]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000aee7b0 a1=4000adc6a8 a2=4000aee780 a3=25 items=0 ppid=1 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.450000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 13:55:56.450000 audit[1727]: AVC avc: denied { mac_admin } for pid=1727 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:56.450000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 13:55:56.450000 audit[1727]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009d1060 a1=4000adc6c0 a2=4000aee840 a3=25 items=0 ppid=1 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.450000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 13:55:56.451865 kubelet[1727]: I1213 13:55:56.451592 1727 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Dec 13 13:55:56.451865 kubelet[1727]: I1213 13:55:56.451637 1727 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Dec 13 13:55:56.451865 kubelet[1727]: I1213 13:55:56.451692 1727 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Dec 13 13:55:56.454499 kubelet[1727]: E1213 13:55:56.454270 1727 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.14:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.14:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1810c115ec8bd7c9 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2024-12-13 13:55:56.444702665 +0000 UTC m=+0.779283469,LastTimestamp:2024-12-13 13:55:56.444702665 +0000 UTC m=+0.779283469,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Dec 13 13:55:56.454000 audit[1740]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.454000 audit[1740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdca7ede0 a2=0 a3=1 items=0 ppid=1727 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Dec 13 13:55:56.459206 kubelet[1727]: E1213 13:55:56.459129 1727 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Dec 13 13:55:56.459290 kubelet[1727]: I1213 13:55:56.459246 1727 volume_manager.go:291] "Starting Kubelet Volume Manager" Dec 13 13:55:56.459838 kubelet[1727]: I1213 13:55:56.459811 1727 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Dec 13 13:55:56.460833 kubelet[1727]: W1213 13:55:56.460787 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.460919 kubelet[1727]: E1213 13:55:56.460841 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.461111 kubelet[1727]: E1213 13:55:56.460956 1727 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Dec 13 13:55:56.461389 kubelet[1727]: I1213 13:55:56.461351 1727 reconciler.go:26] "Reconciler: start to sync state" Dec 13 13:55:56.463710 kubelet[1727]: I1213 13:55:56.463629 1727 factory.go:221] Registration of the systemd container factory successfully Dec 13 13:55:56.463967 kubelet[1727]: I1213 13:55:56.463949 1727 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Dec 13 13:55:56.463000 audit[1741]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.463000 audit[1741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1346210 a2=0 a3=1 items=0 ppid=1727 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Dec 13 13:55:56.465033 kubelet[1727]: E1213 13:55:56.464828 1727 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.14:6443: connect: connection refused" interval="200ms" Dec 13 13:55:56.465366 kubelet[1727]: I1213 13:55:56.465341 1727 factory.go:221] Registration of the containerd container factory successfully Dec 13 13:55:56.468000 audit[1744]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.468000 audit[1744]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe7965680 a2=0 a3=1 items=0 ppid=1727 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.468000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 13:55:56.470000 audit[1746]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.470000 audit[1746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd93eb0b0 a2=0 a3=1 items=0 ppid=1727 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.470000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 13:55:56.476991 kubelet[1727]: I1213 13:55:56.476958 1727 cpu_manager.go:214] "Starting CPU manager" policy="none" Dec 13 13:55:56.476991 kubelet[1727]: I1213 13:55:56.476988 1727 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Dec 13 13:55:56.477103 kubelet[1727]: I1213 13:55:56.477005 1727 state_mem.go:36] "Initialized new in-memory state store" Dec 13 13:55:56.480000 audit[1752]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.480000 audit[1752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff398ab40 a2=0 a3=1 items=0 ppid=1727 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.480000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Dec 13 13:55:56.482440 kubelet[1727]: I1213 13:55:56.482402 1727 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Dec 13 13:55:56.481000 audit[1753]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:55:56.481000 audit[1753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffec87820 a2=0 a3=1 items=0 ppid=1727 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.481000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Dec 13 13:55:56.483434 kubelet[1727]: I1213 13:55:56.483421 1727 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Dec 13 13:55:56.483464 kubelet[1727]: I1213 13:55:56.483449 1727 status_manager.go:217] "Starting to sync pod status with apiserver" Dec 13 13:55:56.483492 kubelet[1727]: I1213 13:55:56.483466 1727 kubelet.go:2337] "Starting kubelet main sync loop" Dec 13 13:55:56.483528 kubelet[1727]: E1213 13:55:56.483503 1727 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Dec 13 13:55:56.486954 kubelet[1727]: W1213 13:55:56.486906 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.487025 kubelet[1727]: E1213 13:55:56.486959 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:56.551564 kubelet[1727]: I1213 13:55:56.551523 1727 policy_none.go:49] "None policy: Start" Dec 13 13:55:56.552204 kubelet[1727]: I1213 13:55:56.552181 1727 memory_manager.go:170] "Starting memorymanager" policy="None" Dec 13 13:55:56.552204 kubelet[1727]: I1213 13:55:56.552208 1727 state_mem.go:35] "Initializing new in-memory state store" Dec 13 13:55:56.551000 audit[1754]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:55:56.551000 audit[1754]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdc8f7e90 a2=0 a3=1 items=0 ppid=1727 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.551000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Dec 13 13:55:56.551000 audit[1755]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=1755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.551000 audit[1755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd2f2d760 a2=0 a3=1 items=0 ppid=1727 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.551000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Dec 13 13:55:56.552000 audit[1756]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1756 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:55:56.552000 audit[1756]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc77f5050 a2=0 a3=1 items=0 ppid=1727 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.552000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Dec 13 13:55:56.553000 audit[1757]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.553000 audit[1757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc30dd850 a2=0 a3=1 items=0 ppid=1727 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Dec 13 13:55:56.553000 audit[1758]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:55:56.553000 audit[1758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc6b02740 a2=0 a3=1 items=0 ppid=1727 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.553000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Dec 13 13:55:56.555000 audit[1759]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:55:56.555000 audit[1759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffece14cf0 a2=0 a3=1 items=0 ppid=1727 pid=1759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.555000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Dec 13 13:55:56.558514 systemd[1]: Created slice kubepods.slice. Dec 13 13:55:56.560394 kubelet[1727]: I1213 13:55:56.560347 1727 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Dec 13 13:55:56.560727 kubelet[1727]: E1213 13:55:56.560698 1727 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.14:6443/api/v1/nodes\": dial tcp 10.0.0.14:6443: connect: connection refused" node="localhost" Dec 13 13:55:56.563937 systemd[1]: Created slice kubepods-burstable.slice. Dec 13 13:55:56.566487 systemd[1]: Created slice kubepods-besteffort.slice. Dec 13 13:55:56.577280 kubelet[1727]: I1213 13:55:56.577246 1727 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Dec 13 13:55:56.576000 audit[1727]: AVC avc: denied { mac_admin } for pid=1727 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:56.576000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 13:55:56.576000 audit[1727]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000aeeb10 a1=4000164db0 a2=4000aeeae0 a3=25 items=0 ppid=1 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:56.576000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 13:55:56.577661 kubelet[1727]: I1213 13:55:56.577642 1727 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Dec 13 13:55:56.577872 kubelet[1727]: I1213 13:55:56.577836 1727 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Dec 13 13:55:56.578054 kubelet[1727]: I1213 13:55:56.578041 1727 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Dec 13 13:55:56.578924 kubelet[1727]: E1213 13:55:56.578898 1727 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Dec 13 13:55:56.583922 kubelet[1727]: I1213 13:55:56.583889 1727 topology_manager.go:215] "Topology Admit Handler" podUID="9bb93c9fb6f092aac45c6fdb0f53fcb0" podNamespace="kube-system" podName="kube-apiserver-localhost" Dec 13 13:55:56.584766 kubelet[1727]: I1213 13:55:56.584745 1727 topology_manager.go:215] "Topology Admit Handler" podUID="8a50003978138b3ab9890682eff4eae8" podNamespace="kube-system" podName="kube-controller-manager-localhost" Dec 13 13:55:56.585605 kubelet[1727]: I1213 13:55:56.585582 1727 topology_manager.go:215] "Topology Admit Handler" podUID="b107a98bcf27297d642d248711a3fc70" podNamespace="kube-system" podName="kube-scheduler-localhost" Dec 13 13:55:56.589333 systemd[1]: Created slice kubepods-burstable-pod9bb93c9fb6f092aac45c6fdb0f53fcb0.slice. Dec 13 13:55:56.600377 systemd[1]: Created slice kubepods-burstable-pod8a50003978138b3ab9890682eff4eae8.slice. Dec 13 13:55:56.603740 systemd[1]: Created slice kubepods-burstable-podb107a98bcf27297d642d248711a3fc70.slice. Dec 13 13:55:56.664217 kubelet[1727]: I1213 13:55:56.662204 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9bb93c9fb6f092aac45c6fdb0f53fcb0-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9bb93c9fb6f092aac45c6fdb0f53fcb0\") " pod="kube-system/kube-apiserver-localhost" Dec 13 13:55:56.664217 kubelet[1727]: I1213 13:55:56.662241 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9bb93c9fb6f092aac45c6fdb0f53fcb0-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9bb93c9fb6f092aac45c6fdb0f53fcb0\") " pod="kube-system/kube-apiserver-localhost" Dec 13 13:55:56.664217 kubelet[1727]: I1213 13:55:56.662268 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9bb93c9fb6f092aac45c6fdb0f53fcb0-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9bb93c9fb6f092aac45c6fdb0f53fcb0\") " pod="kube-system/kube-apiserver-localhost" Dec 13 13:55:56.664217 kubelet[1727]: I1213 13:55:56.662286 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:55:56.664217 kubelet[1727]: I1213 13:55:56.662301 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:55:56.664469 kubelet[1727]: I1213 13:55:56.662315 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:55:56.664469 kubelet[1727]: I1213 13:55:56.662339 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:55:56.664469 kubelet[1727]: I1213 13:55:56.662367 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:55:56.664469 kubelet[1727]: I1213 13:55:56.662383 1727 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b107a98bcf27297d642d248711a3fc70-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b107a98bcf27297d642d248711a3fc70\") " pod="kube-system/kube-scheduler-localhost" Dec 13 13:55:56.665776 kubelet[1727]: E1213 13:55:56.665740 1727 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.14:6443: connect: connection refused" interval="400ms" Dec 13 13:55:56.762677 kubelet[1727]: I1213 13:55:56.762646 1727 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Dec 13 13:55:56.763198 kubelet[1727]: E1213 13:55:56.763176 1727 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.14:6443/api/v1/nodes\": dial tcp 10.0.0.14:6443: connect: connection refused" node="localhost" Dec 13 13:55:56.897832 kubelet[1727]: E1213 13:55:56.897795 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:56.898565 env[1220]: time="2024-12-13T13:55:56.898508206Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9bb93c9fb6f092aac45c6fdb0f53fcb0,Namespace:kube-system,Attempt:0,}" Dec 13 13:55:56.902702 kubelet[1727]: E1213 13:55:56.902681 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:56.903103 env[1220]: time="2024-12-13T13:55:56.903074378Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:8a50003978138b3ab9890682eff4eae8,Namespace:kube-system,Attempt:0,}" Dec 13 13:55:56.905810 kubelet[1727]: E1213 13:55:56.905789 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:56.906386 env[1220]: time="2024-12-13T13:55:56.906179177Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b107a98bcf27297d642d248711a3fc70,Namespace:kube-system,Attempt:0,}" Dec 13 13:55:57.066351 kubelet[1727]: E1213 13:55:57.066255 1727 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.14:6443: connect: connection refused" interval="800ms" Dec 13 13:55:57.164833 kubelet[1727]: I1213 13:55:57.164784 1727 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Dec 13 13:55:57.165149 kubelet[1727]: E1213 13:55:57.165096 1727 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.14:6443/api/v1/nodes\": dial tcp 10.0.0.14:6443: connect: connection refused" node="localhost" Dec 13 13:55:57.416781 kubelet[1727]: W1213 13:55:57.416686 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.416781 kubelet[1727]: E1213 13:55:57.416747 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.14:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.452612 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount130994523.mount: Deactivated successfully. Dec 13 13:55:57.457852 env[1220]: time="2024-12-13T13:55:57.457808757Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.458629 env[1220]: time="2024-12-13T13:55:57.458608895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.459880 env[1220]: time="2024-12-13T13:55:57.459398409Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.462028 env[1220]: time="2024-12-13T13:55:57.461995973Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.463469 env[1220]: time="2024-12-13T13:55:57.463441718Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.465736 env[1220]: time="2024-12-13T13:55:57.465703537Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.466429 env[1220]: time="2024-12-13T13:55:57.466400189Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.469177 env[1220]: time="2024-12-13T13:55:57.469136667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.471101 env[1220]: time="2024-12-13T13:55:57.471072249Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.472802 env[1220]: time="2024-12-13T13:55:57.472777131Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.473610 env[1220]: time="2024-12-13T13:55:57.473578028Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.474480 env[1220]: time="2024-12-13T13:55:57.474456850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:55:57.508705 env[1220]: time="2024-12-13T13:55:57.508601664Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:55:57.508705 env[1220]: time="2024-12-13T13:55:57.508644760Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:55:57.508705 env[1220]: time="2024-12-13T13:55:57.508655345Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:55:57.508993 env[1220]: time="2024-12-13T13:55:57.508939206Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:55:57.509120 env[1220]: time="2024-12-13T13:55:57.509097771Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:55:57.509230 env[1220]: time="2024-12-13T13:55:57.509188078Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:55:57.509476 env[1220]: time="2024-12-13T13:55:57.509430680Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cecdd4c431ecd6645f72b6848c69aa00ee51b1664822bfaea85dd2221bb54f48 pid=1781 runtime=io.containerd.runc.v2 Dec 13 13:55:57.510589 env[1220]: time="2024-12-13T13:55:57.509412826Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf0086768388586ad41c71ca96407355f55c24a3358b1f86c9e51958e36fa1f3 pid=1782 runtime=io.containerd.runc.v2 Dec 13 13:55:57.513029 env[1220]: time="2024-12-13T13:55:57.512947606Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:55:57.513029 env[1220]: time="2024-12-13T13:55:57.512986868Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:55:57.513029 env[1220]: time="2024-12-13T13:55:57.512996693Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:55:57.516030 env[1220]: time="2024-12-13T13:55:57.515976333Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/82aaea799ddd13adac15aed311ada42d65b5be4107faaec1018f01373c3afee8 pid=1784 runtime=io.containerd.runc.v2 Dec 13 13:55:57.522463 systemd[1]: Started cri-containerd-bf0086768388586ad41c71ca96407355f55c24a3358b1f86c9e51958e36fa1f3.scope. Dec 13 13:55:57.527609 systemd[1]: Started cri-containerd-cecdd4c431ecd6645f72b6848c69aa00ee51b1664822bfaea85dd2221bb54f48.scope. Dec 13 13:55:57.538425 systemd[1]: Started cri-containerd-82aaea799ddd13adac15aed311ada42d65b5be4107faaec1018f01373c3afee8.scope. Dec 13 13:55:57.558529 kernel: kauditd_printk_skb: 221 callbacks suppressed Dec 13 13:55:57.558625 kernel: audit: type=1400 audit(1734098157.556:456): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563055 kernel: audit: type=1400 audit(1734098157.556:457): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563121 kernel: audit: type=1400 audit(1734098157.556:458): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.565293 kernel: audit: type=1400 audit(1734098157.556:459): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.570375 kernel: audit: type=1400 audit(1734098157.556:460): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.570466 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Dec 13 13:55:57.570489 kernel: audit: type=1400 audit(1734098157.556:461): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.570547 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.573494 kernel: audit: type=1400 audit(1734098157.556:462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.573542 kernel: audit: backlog limit exceeded Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.557000 audit: BPF prog-id=61 op=LOAD Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1782 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303038363736383338383538366164343163373163613936343037 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1782 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303038363736383338383538366164343163373163613936343037 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.560000 audit: BPF prog-id=62 op=LOAD Dec 13 13:55:57.560000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1782 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303038363736383338383538366164343163373163613936343037 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.561000 audit: BPF prog-id=63 op=LOAD Dec 13 13:55:57.561000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1782 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303038363736383338383538366164343163373163613936343037 Dec 13 13:55:57.563000 audit: BPF prog-id=63 op=UNLOAD Dec 13 13:55:57.563000 audit: BPF prog-id=62 op=UNLOAD Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { perfmon } for pid=1809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit[1809]: AVC avc: denied { bpf } for pid=1809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.563000 audit: BPF prog-id=64 op=LOAD Dec 13 13:55:57.563000 audit[1809]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1782 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303038363736383338383538366164343163373163613936343037 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit: BPF prog-id=65 op=LOAD Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1781 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365636464346334333165636436363435663732623638343863363961 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1781 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365636464346334333165636436363435663732623638343863363961 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit: BPF prog-id=66 op=LOAD Dec 13 13:55:57.575000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1781 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365636464346334333165636436363435663732623638343863363961 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit: BPF prog-id=67 op=LOAD Dec 13 13:55:57.575000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1781 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365636464346334333165636436363435663732623638343863363961 Dec 13 13:55:57.575000 audit: BPF prog-id=67 op=UNLOAD Dec 13 13:55:57.575000 audit: BPF prog-id=66 op=UNLOAD Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.575000 audit: BPF prog-id=68 op=LOAD Dec 13 13:55:57.575000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1781 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365636464346334333165636436363435663732623638343863363961 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.577000 audit: BPF prog-id=69 op=LOAD Dec 13 13:55:57.578000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.578000 audit[1827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1784 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616165613739396464643133616461633135616564333131616461 Dec 13 13:55:57.578000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.578000 audit[1827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1784 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616165613739396464643133616461633135616564333131616461 Dec 13 13:55:57.578000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.578000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.578000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.578000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.578000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.578000 audit[1827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1784 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616165613739396464643133616461633135616564333131616461 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit: BPF prog-id=71 op=LOAD Dec 13 13:55:57.580000 audit[1827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1784 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616165613739396464643133616461633135616564333131616461 Dec 13 13:55:57.580000 audit: BPF prog-id=71 op=UNLOAD Dec 13 13:55:57.580000 audit: BPF prog-id=70 op=UNLOAD Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { perfmon } for pid=1827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit[1827]: AVC avc: denied { bpf } for pid=1827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.580000 audit: BPF prog-id=72 op=LOAD Dec 13 13:55:57.580000 audit[1827]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1784 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832616165613739396464643133616461633135616564333131616461 Dec 13 13:55:57.596240 env[1220]: time="2024-12-13T13:55:57.596200775Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b107a98bcf27297d642d248711a3fc70,Namespace:kube-system,Attempt:0,} returns sandbox id \"bf0086768388586ad41c71ca96407355f55c24a3358b1f86c9e51958e36fa1f3\"" Dec 13 13:55:57.597771 kubelet[1727]: E1213 13:55:57.597513 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:57.602590 env[1220]: time="2024-12-13T13:55:57.600524430Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9bb93c9fb6f092aac45c6fdb0f53fcb0,Namespace:kube-system,Attempt:0,} returns sandbox id \"cecdd4c431ecd6645f72b6848c69aa00ee51b1664822bfaea85dd2221bb54f48\"" Dec 13 13:55:57.602590 env[1220]: time="2024-12-13T13:55:57.601642538Z" level=info msg="CreateContainer within sandbox \"bf0086768388586ad41c71ca96407355f55c24a3358b1f86c9e51958e36fa1f3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Dec 13 13:55:57.604603 kubelet[1727]: W1213 13:55:57.604554 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.604679 kubelet[1727]: E1213 13:55:57.604618 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.14:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.608600 kubelet[1727]: E1213 13:55:57.608510 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:57.610397 env[1220]: time="2024-12-13T13:55:57.610352994Z" level=info msg="CreateContainer within sandbox \"cecdd4c431ecd6645f72b6848c69aa00ee51b1664822bfaea85dd2221bb54f48\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Dec 13 13:55:57.611278 env[1220]: time="2024-12-13T13:55:57.611234333Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:8a50003978138b3ab9890682eff4eae8,Namespace:kube-system,Attempt:0,} returns sandbox id \"82aaea799ddd13adac15aed311ada42d65b5be4107faaec1018f01373c3afee8\"" Dec 13 13:55:57.612232 kubelet[1727]: E1213 13:55:57.612213 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:57.614140 env[1220]: time="2024-12-13T13:55:57.614105932Z" level=info msg="CreateContainer within sandbox \"82aaea799ddd13adac15aed311ada42d65b5be4107faaec1018f01373c3afee8\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Dec 13 13:55:57.616301 env[1220]: time="2024-12-13T13:55:57.616262068Z" level=info msg="CreateContainer within sandbox \"bf0086768388586ad41c71ca96407355f55c24a3358b1f86c9e51958e36fa1f3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"8df2b290c8b0eb123189543c09007304174bd30684d68af930c618c27fd4a5d1\"" Dec 13 13:55:57.616798 env[1220]: time="2024-12-13T13:55:57.616772194Z" level=info msg="StartContainer for \"8df2b290c8b0eb123189543c09007304174bd30684d68af930c618c27fd4a5d1\"" Dec 13 13:55:57.625772 env[1220]: time="2024-12-13T13:55:57.625727689Z" level=info msg="CreateContainer within sandbox \"cecdd4c431ecd6645f72b6848c69aa00ee51b1664822bfaea85dd2221bb54f48\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e5514ec811423e7f8a9133b43059caabf1e3255a93632a6d433ab6924787394e\"" Dec 13 13:55:57.626480 env[1220]: time="2024-12-13T13:55:57.626351088Z" level=info msg="StartContainer for \"e5514ec811423e7f8a9133b43059caabf1e3255a93632a6d433ab6924787394e\"" Dec 13 13:55:57.631676 env[1220]: time="2024-12-13T13:55:57.631629972Z" level=info msg="CreateContainer within sandbox \"82aaea799ddd13adac15aed311ada42d65b5be4107faaec1018f01373c3afee8\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"d0653d20d3ec839de4aae5cd345f329be1b7e7f040d22fa9939deb1b8e5b0ce6\"" Dec 13 13:55:57.632027 env[1220]: time="2024-12-13T13:55:57.631997549Z" level=info msg="StartContainer for \"d0653d20d3ec839de4aae5cd345f329be1b7e7f040d22fa9939deb1b8e5b0ce6\"" Dec 13 13:55:57.637397 systemd[1]: Started cri-containerd-8df2b290c8b0eb123189543c09007304174bd30684d68af930c618c27fd4a5d1.scope. Dec 13 13:55:57.655626 systemd[1]: Started cri-containerd-e5514ec811423e7f8a9133b43059caabf1e3255a93632a6d433ab6924787394e.scope. Dec 13 13:55:57.673224 kubelet[1727]: W1213 13:55:57.667491 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.14:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.673224 kubelet[1727]: E1213 13:55:57.667557 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.14:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.670660 systemd[1]: Started cri-containerd-d0653d20d3ec839de4aae5cd345f329be1b7e7f040d22fa9939deb1b8e5b0ce6.scope. Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit: BPF prog-id=73 op=LOAD Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1782 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663262323930633862306562313233313839353433633039303037 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1782 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663262323930633862306562313233313839353433633039303037 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit: BPF prog-id=74 op=LOAD Dec 13 13:55:57.679000 audit[1896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1782 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663262323930633862306562313233313839353433633039303037 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit: BPF prog-id=75 op=LOAD Dec 13 13:55:57.679000 audit[1896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1782 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663262323930633862306562313233313839353433633039303037 Dec 13 13:55:57.679000 audit: BPF prog-id=75 op=UNLOAD Dec 13 13:55:57.679000 audit: BPF prog-id=74 op=UNLOAD Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { perfmon } for pid=1896 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit[1896]: AVC avc: denied { bpf } for pid=1896 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.679000 audit: BPF prog-id=76 op=LOAD Dec 13 13:55:57.679000 audit[1896]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1782 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663262323930633862306562313233313839353433633039303037 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit: BPF prog-id=77 op=LOAD Dec 13 13:55:57.688000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.688000 audit[1910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1781 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353134656338313134323365376638613931333362343330353963 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1781 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353134656338313134323365376638613931333362343330353963 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.689000 audit: BPF prog-id=78 op=LOAD Dec 13 13:55:57.689000 audit[1910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1781 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353134656338313134323365376638613931333362343330353963 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.690000 audit: BPF prog-id=79 op=LOAD Dec 13 13:55:57.690000 audit[1910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1781 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353134656338313134323365376638613931333362343330353963 Dec 13 13:55:57.690000 audit: BPF prog-id=79 op=UNLOAD Dec 13 13:55:57.691000 audit: BPF prog-id=78 op=UNLOAD Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.691000 audit: BPF prog-id=80 op=LOAD Dec 13 13:55:57.691000 audit[1910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1781 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353134656338313134323365376638613931333362343330353963 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit: BPF prog-id=81 op=LOAD Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1784 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430363533643230643365633833396465346161653563643334356633 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1784 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430363533643230643365633833396465346161653563643334356633 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit: BPF prog-id=82 op=LOAD Dec 13 13:55:57.699000 audit[1933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1784 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430363533643230643365633833396465346161653563643334356633 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit: BPF prog-id=83 op=LOAD Dec 13 13:55:57.699000 audit[1933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1784 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430363533643230643365633833396465346161653563643334356633 Dec 13 13:55:57.699000 audit: BPF prog-id=83 op=UNLOAD Dec 13 13:55:57.699000 audit: BPF prog-id=82 op=UNLOAD Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { perfmon } for pid=1933 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit[1933]: AVC avc: denied { bpf } for pid=1933 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:55:57.699000 audit: BPF prog-id=84 op=LOAD Dec 13 13:55:57.699000 audit[1933]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1784 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:55:57.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430363533643230643365633833396465346161653563643334356633 Dec 13 13:55:57.705336 env[1220]: time="2024-12-13T13:55:57.705289749Z" level=info msg="StartContainer for \"8df2b290c8b0eb123189543c09007304174bd30684d68af930c618c27fd4a5d1\" returns successfully" Dec 13 13:55:57.731959 env[1220]: time="2024-12-13T13:55:57.731910954Z" level=info msg="StartContainer for \"e5514ec811423e7f8a9133b43059caabf1e3255a93632a6d433ab6924787394e\" returns successfully" Dec 13 13:55:57.748017 env[1220]: time="2024-12-13T13:55:57.747948469Z" level=info msg="StartContainer for \"d0653d20d3ec839de4aae5cd345f329be1b7e7f040d22fa9939deb1b8e5b0ce6\" returns successfully" Dec 13 13:55:57.763186 kubelet[1727]: W1213 13:55:57.760783 1727 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.763186 kubelet[1727]: E1213 13:55:57.760841 1727 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.14:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.14:6443: connect: connection refused Dec 13 13:55:57.867235 kubelet[1727]: E1213 13:55:57.867188 1727 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.14:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.14:6443: connect: connection refused" interval="1.6s" Dec 13 13:55:57.966496 kubelet[1727]: I1213 13:55:57.966398 1727 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Dec 13 13:55:58.493125 kubelet[1727]: E1213 13:55:58.493081 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:58.495017 kubelet[1727]: E1213 13:55:58.494992 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:58.497078 kubelet[1727]: E1213 13:55:58.497056 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:55:59.020000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.022000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.022000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400077e060 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:55:59.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:55:59.020000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003fe120 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:55:59.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:55:59.310000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.310000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.310000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400204c460 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:55:59.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:55:59.310000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40036e40c0 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:55:59.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:55:59.312000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.312000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40089af9e0 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:55:59.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:55:59.313000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.313000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=4000626a80 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:55:59.313000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:55:59.313000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.313000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=40039cc750 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:55:59.313000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:55:59.312000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:55:59.312000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40007692c0 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:55:59.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:55:59.442821 kubelet[1727]: I1213 13:55:59.442775 1727 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Dec 13 13:55:59.443418 kubelet[1727]: I1213 13:55:59.443397 1727 apiserver.go:52] "Watching apiserver" Dec 13 13:55:59.460208 kubelet[1727]: I1213 13:55:59.460178 1727 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Dec 13 13:55:59.504505 kubelet[1727]: E1213 13:55:59.504466 1727 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Dec 13 13:55:59.504962 kubelet[1727]: E1213 13:55:59.504933 1727 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:01.621077 systemd[1]: Reloading. Dec 13 13:56:01.669904 /usr/lib/systemd/system-generators/torcx-generator[2026]: time="2024-12-13T13:56:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.6 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.6 /var/lib/torcx/store]" Dec 13 13:56:01.669946 /usr/lib/systemd/system-generators/torcx-generator[2026]: time="2024-12-13T13:56:01Z" level=info msg="torcx already run" Dec 13 13:56:01.723659 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Dec 13 13:56:01.723679 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Dec 13 13:56:01.738914 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.795000 audit: BPF prog-id=85 op=LOAD Dec 13 13:56:01.795000 audit: BPF prog-id=69 op=UNLOAD Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit: BPF prog-id=86 op=LOAD Dec 13 13:56:01.796000 audit: BPF prog-id=46 op=UNLOAD Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit: BPF prog-id=87 op=LOAD Dec 13 13:56:01.796000 audit: BPF prog-id=47 op=UNLOAD Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit: BPF prog-id=88 op=LOAD Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.796000 audit: BPF prog-id=89 op=LOAD Dec 13 13:56:01.796000 audit: BPF prog-id=48 op=UNLOAD Dec 13 13:56:01.796000 audit: BPF prog-id=49 op=UNLOAD Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit: BPF prog-id=90 op=LOAD Dec 13 13:56:01.797000 audit: BPF prog-id=50 op=UNLOAD Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit: BPF prog-id=91 op=LOAD Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.797000 audit: BPF prog-id=92 op=LOAD Dec 13 13:56:01.797000 audit: BPF prog-id=51 op=UNLOAD Dec 13 13:56:01.797000 audit: BPF prog-id=52 op=UNLOAD Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit: BPF prog-id=93 op=LOAD Dec 13 13:56:01.798000 audit: BPF prog-id=65 op=UNLOAD Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.799000 audit: BPF prog-id=94 op=LOAD Dec 13 13:56:01.799000 audit: BPF prog-id=77 op=UNLOAD Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.800000 audit: BPF prog-id=95 op=LOAD Dec 13 13:56:01.800000 audit: BPF prog-id=73 op=UNLOAD Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.801000 audit: BPF prog-id=96 op=LOAD Dec 13 13:56:01.801000 audit: BPF prog-id=81 op=UNLOAD Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit: BPF prog-id=97 op=LOAD Dec 13 13:56:01.802000 audit: BPF prog-id=53 op=UNLOAD Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit: BPF prog-id=98 op=LOAD Dec 13 13:56:01.802000 audit: BPF prog-id=54 op=UNLOAD Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit: BPF prog-id=99 op=LOAD Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.802000 audit: BPF prog-id=100 op=LOAD Dec 13 13:56:01.802000 audit: BPF prog-id=55 op=UNLOAD Dec 13 13:56:01.802000 audit: BPF prog-id=56 op=UNLOAD Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.803000 audit: BPF prog-id=101 op=LOAD Dec 13 13:56:01.803000 audit: BPF prog-id=57 op=UNLOAD Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.805000 audit: BPF prog-id=102 op=LOAD Dec 13 13:56:01.805000 audit: BPF prog-id=61 op=UNLOAD Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit: BPF prog-id=103 op=LOAD Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.806000 audit: BPF prog-id=104 op=LOAD Dec 13 13:56:01.806000 audit: BPF prog-id=58 op=UNLOAD Dec 13 13:56:01.806000 audit: BPF prog-id=59 op=UNLOAD Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.807000 audit: BPF prog-id=105 op=LOAD Dec 13 13:56:01.807000 audit: BPF prog-id=60 op=UNLOAD Dec 13 13:56:01.818393 systemd[1]: Stopping kubelet.service... Dec 13 13:56:01.840721 systemd[1]: kubelet.service: Deactivated successfully. Dec 13 13:56:01.840905 systemd[1]: Stopped kubelet.service. Dec 13 13:56:01.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:01.840955 systemd[1]: kubelet.service: Consumed 1.135s CPU time. Dec 13 13:56:01.842511 systemd[1]: Starting kubelet.service... Dec 13 13:56:01.926885 systemd[1]: Started kubelet.service. Dec 13 13:56:01.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:01.971136 kubelet[2068]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 13:56:01.971136 kubelet[2068]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Dec 13 13:56:01.971136 kubelet[2068]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Dec 13 13:56:01.971136 kubelet[2068]: I1213 13:56:01.970914 2068 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Dec 13 13:56:01.975271 kubelet[2068]: I1213 13:56:01.975236 2068 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Dec 13 13:56:01.975271 kubelet[2068]: I1213 13:56:01.975264 2068 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Dec 13 13:56:01.975502 kubelet[2068]: I1213 13:56:01.975486 2068 server.go:927] "Client rotation is on, will bootstrap in background" Dec 13 13:56:01.976766 kubelet[2068]: I1213 13:56:01.976744 2068 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Dec 13 13:56:01.977845 kubelet[2068]: I1213 13:56:01.977827 2068 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Dec 13 13:56:01.982944 kubelet[2068]: I1213 13:56:01.982925 2068 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Dec 13 13:56:01.983135 kubelet[2068]: I1213 13:56:01.983114 2068 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Dec 13 13:56:01.983289 kubelet[2068]: I1213 13:56:01.983138 2068 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Dec 13 13:56:01.983376 kubelet[2068]: I1213 13:56:01.983295 2068 topology_manager.go:138] "Creating topology manager with none policy" Dec 13 13:56:01.983376 kubelet[2068]: I1213 13:56:01.983304 2068 container_manager_linux.go:301] "Creating device plugin manager" Dec 13 13:56:01.983376 kubelet[2068]: I1213 13:56:01.983335 2068 state_mem.go:36] "Initialized new in-memory state store" Dec 13 13:56:01.983475 kubelet[2068]: I1213 13:56:01.983464 2068 kubelet.go:400] "Attempting to sync node with API server" Dec 13 13:56:01.983506 kubelet[2068]: I1213 13:56:01.983478 2068 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Dec 13 13:56:01.983506 kubelet[2068]: I1213 13:56:01.983502 2068 kubelet.go:312] "Adding apiserver pod source" Dec 13 13:56:01.983549 kubelet[2068]: I1213 13:56:01.983517 2068 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Dec 13 13:56:01.988675 kubelet[2068]: I1213 13:56:01.986879 2068 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Dec 13 13:56:01.988675 kubelet[2068]: I1213 13:56:01.987067 2068 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Dec 13 13:56:01.988675 kubelet[2068]: I1213 13:56:01.987512 2068 server.go:1264] "Started kubelet" Dec 13 13:56:01.989928 kubelet[2068]: I1213 13:56:01.989897 2068 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Dec 13 13:56:01.990015 kubelet[2068]: I1213 13:56:01.989943 2068 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Dec 13 13:56:01.990015 kubelet[2068]: I1213 13:56:01.989975 2068 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Dec 13 13:56:01.991954 kubelet[2068]: E1213 13:56:01.991930 2068 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Dec 13 13:56:01.989000 audit[2068]: AVC avc: denied { mac_admin } for pid=2068 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.989000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 13:56:01.989000 audit[2068]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d60870 a1=4000a569a8 a2=4000d60840 a3=25 items=0 ppid=1 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:01.989000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 13:56:01.989000 audit[2068]: AVC avc: denied { mac_admin } for pid=2068 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:01.989000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 13:56:01.989000 audit[2068]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a32800 a1=4000a569c0 a2=4000d60900 a3=25 items=0 ppid=1 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:01.989000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 13:56:01.993739 kubelet[2068]: I1213 13:56:01.993697 2068 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Dec 13 13:56:01.994082 kubelet[2068]: I1213 13:56:01.994040 2068 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Dec 13 13:56:01.994300 kubelet[2068]: I1213 13:56:01.994280 2068 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Dec 13 13:56:01.996036 kubelet[2068]: I1213 13:56:01.996016 2068 server.go:455] "Adding debug handlers to kubelet server" Dec 13 13:56:02.003879 kubelet[2068]: I1213 13:56:02.003859 2068 volume_manager.go:291] "Starting Kubelet Volume Manager" Dec 13 13:56:02.004176 kubelet[2068]: I1213 13:56:02.004156 2068 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Dec 13 13:56:02.004414 kubelet[2068]: I1213 13:56:02.004400 2068 reconciler.go:26] "Reconciler: start to sync state" Dec 13 13:56:02.005652 kubelet[2068]: I1213 13:56:02.005625 2068 factory.go:221] Registration of the systemd container factory successfully Dec 13 13:56:02.005734 kubelet[2068]: I1213 13:56:02.005708 2068 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Dec 13 13:56:02.008766 kubelet[2068]: I1213 13:56:02.008741 2068 factory.go:221] Registration of the containerd container factory successfully Dec 13 13:56:02.011121 kubelet[2068]: I1213 13:56:02.011088 2068 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Dec 13 13:56:02.012480 kubelet[2068]: I1213 13:56:02.012457 2068 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Dec 13 13:56:02.012553 kubelet[2068]: I1213 13:56:02.012492 2068 status_manager.go:217] "Starting to sync pod status with apiserver" Dec 13 13:56:02.012553 kubelet[2068]: I1213 13:56:02.012506 2068 kubelet.go:2337] "Starting kubelet main sync loop" Dec 13 13:56:02.012553 kubelet[2068]: E1213 13:56:02.012547 2068 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Dec 13 13:56:02.036365 kubelet[2068]: I1213 13:56:02.036330 2068 cpu_manager.go:214] "Starting CPU manager" policy="none" Dec 13 13:56:02.036443 kubelet[2068]: I1213 13:56:02.036349 2068 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Dec 13 13:56:02.036443 kubelet[2068]: I1213 13:56:02.036396 2068 state_mem.go:36] "Initialized new in-memory state store" Dec 13 13:56:02.036562 kubelet[2068]: I1213 13:56:02.036526 2068 state_mem.go:88] "Updated default CPUSet" cpuSet="" Dec 13 13:56:02.036562 kubelet[2068]: I1213 13:56:02.036543 2068 state_mem.go:96] "Updated CPUSet assignments" assignments={} Dec 13 13:56:02.036562 kubelet[2068]: I1213 13:56:02.036559 2068 policy_none.go:49] "None policy: Start" Dec 13 13:56:02.037094 kubelet[2068]: I1213 13:56:02.037074 2068 memory_manager.go:170] "Starting memorymanager" policy="None" Dec 13 13:56:02.037094 kubelet[2068]: I1213 13:56:02.037094 2068 state_mem.go:35] "Initializing new in-memory state store" Dec 13 13:56:02.037226 kubelet[2068]: I1213 13:56:02.037209 2068 state_mem.go:75] "Updated machine memory state" Dec 13 13:56:02.040327 kubelet[2068]: I1213 13:56:02.040307 2068 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Dec 13 13:56:02.038000 audit[2068]: AVC avc: denied { mac_admin } for pid=2068 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:02.038000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Dec 13 13:56:02.038000 audit[2068]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000fd0b40 a1=40013811e8 a2=4000fd0b10 a3=25 items=0 ppid=1 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:02.038000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Dec 13 13:56:02.040578 kubelet[2068]: I1213 13:56:02.040397 2068 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Dec 13 13:56:02.040578 kubelet[2068]: I1213 13:56:02.040525 2068 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Dec 13 13:56:02.040632 kubelet[2068]: I1213 13:56:02.040610 2068 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Dec 13 13:56:02.110502 kubelet[2068]: I1213 13:56:02.110466 2068 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Dec 13 13:56:02.113062 kubelet[2068]: I1213 13:56:02.113022 2068 topology_manager.go:215] "Topology Admit Handler" podUID="b107a98bcf27297d642d248711a3fc70" podNamespace="kube-system" podName="kube-scheduler-localhost" Dec 13 13:56:02.113155 kubelet[2068]: I1213 13:56:02.113134 2068 topology_manager.go:215] "Topology Admit Handler" podUID="9bb93c9fb6f092aac45c6fdb0f53fcb0" podNamespace="kube-system" podName="kube-apiserver-localhost" Dec 13 13:56:02.113198 kubelet[2068]: I1213 13:56:02.113172 2068 topology_manager.go:215] "Topology Admit Handler" podUID="8a50003978138b3ab9890682eff4eae8" podNamespace="kube-system" podName="kube-controller-manager-localhost" Dec 13 13:56:02.119701 kubelet[2068]: I1213 13:56:02.119643 2068 kubelet_node_status.go:112] "Node was previously registered" node="localhost" Dec 13 13:56:02.119826 kubelet[2068]: I1213 13:56:02.119722 2068 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Dec 13 13:56:02.206434 kubelet[2068]: I1213 13:56:02.205484 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9bb93c9fb6f092aac45c6fdb0f53fcb0-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9bb93c9fb6f092aac45c6fdb0f53fcb0\") " pod="kube-system/kube-apiserver-localhost" Dec 13 13:56:02.206434 kubelet[2068]: I1213 13:56:02.205526 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:56:02.206434 kubelet[2068]: I1213 13:56:02.205550 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:56:02.206434 kubelet[2068]: I1213 13:56:02.205568 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b107a98bcf27297d642d248711a3fc70-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b107a98bcf27297d642d248711a3fc70\") " pod="kube-system/kube-scheduler-localhost" Dec 13 13:56:02.206434 kubelet[2068]: I1213 13:56:02.205587 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9bb93c9fb6f092aac45c6fdb0f53fcb0-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9bb93c9fb6f092aac45c6fdb0f53fcb0\") " pod="kube-system/kube-apiserver-localhost" Dec 13 13:56:02.206703 kubelet[2068]: I1213 13:56:02.205603 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9bb93c9fb6f092aac45c6fdb0f53fcb0-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9bb93c9fb6f092aac45c6fdb0f53fcb0\") " pod="kube-system/kube-apiserver-localhost" Dec 13 13:56:02.206703 kubelet[2068]: I1213 13:56:02.205616 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:56:02.206703 kubelet[2068]: I1213 13:56:02.205634 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:56:02.206703 kubelet[2068]: I1213 13:56:02.205649 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8a50003978138b3ab9890682eff4eae8-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"8a50003978138b3ab9890682eff4eae8\") " pod="kube-system/kube-controller-manager-localhost" Dec 13 13:56:02.419803 kubelet[2068]: E1213 13:56:02.419761 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:02.419947 kubelet[2068]: E1213 13:56:02.419763 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:02.421103 kubelet[2068]: E1213 13:56:02.421080 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:02.984576 kubelet[2068]: I1213 13:56:02.984531 2068 apiserver.go:52] "Watching apiserver" Dec 13 13:56:03.004556 kubelet[2068]: I1213 13:56:03.004518 2068 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Dec 13 13:56:03.024371 kubelet[2068]: E1213 13:56:03.024327 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:03.024663 kubelet[2068]: E1213 13:56:03.024629 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:03.030593 kubelet[2068]: E1213 13:56:03.029825 2068 kubelet.go:1928] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Dec 13 13:56:03.030593 kubelet[2068]: E1213 13:56:03.030249 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:03.046959 kubelet[2068]: I1213 13:56:03.046897 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.046869495 podStartE2EDuration="1.046869495s" podCreationTimestamp="2024-12-13 13:56:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 13:56:03.042131605 +0000 UTC m=+1.111461116" watchObservedRunningTime="2024-12-13 13:56:03.046869495 +0000 UTC m=+1.116199006" Dec 13 13:56:03.049561 kubelet[2068]: I1213 13:56:03.049514 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.049503101 podStartE2EDuration="1.049503101s" podCreationTimestamp="2024-12-13 13:56:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 13:56:03.04939991 +0000 UTC m=+1.118729421" watchObservedRunningTime="2024-12-13 13:56:03.049503101 +0000 UTC m=+1.118832612" Dec 13 13:56:03.056305 kubelet[2068]: I1213 13:56:03.056256 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.056245725 podStartE2EDuration="1.056245725s" podCreationTimestamp="2024-12-13 13:56:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 13:56:03.055752414 +0000 UTC m=+1.125081925" watchObservedRunningTime="2024-12-13 13:56:03.056245725 +0000 UTC m=+1.125575196" Dec 13 13:56:03.690081 kernel: kauditd_printk_skb: 628 callbacks suppressed Dec 13 13:56:03.690206 kernel: audit: type=1400 audit(1734098163.684:820): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.684000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.684000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d4b560 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:03.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:03.698224 kernel: audit: type=1300 audit(1734098163.684:820): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d4b560 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:03.698307 kernel: audit: type=1327 audit(1734098163.684:820): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:03.684000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.684000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d4b5a0 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:03.705826 kernel: audit: type=1400 audit(1734098163.684:821): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.705889 kernel: audit: type=1300 audit(1734098163.684:821): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d4b5a0 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:03.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:03.709295 kernel: audit: type=1327 audit(1734098163.684:821): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:03.684000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.712854 kernel: audit: type=1400 audit(1734098163.684:822): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.684000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d4b5e0 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:03.717317 kernel: audit: type=1300 audit(1734098163.684:822): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d4b5e0 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:03.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:03.721163 kernel: audit: type=1327 audit(1734098163.684:822): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:03.684000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.724695 kernel: audit: type=1400 audit(1734098163.684:823): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:03.684000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d4b620 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:03.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:04.026142 kubelet[2068]: E1213 13:56:04.026037 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:04.869000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=8244 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Dec 13 13:56:04.869000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001002380 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:04.869000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:04.923027 kubelet[2068]: E1213 13:56:04.922981 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:05.027932 kubelet[2068]: E1213 13:56:05.027888 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:06.762574 sudo[1359]: pam_unix(sudo:session): session closed for user root Dec 13 13:56:06.762000 audit[1359]: USER_END pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:56:06.762000 audit[1359]: CRED_DISP pid=1359 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Dec 13 13:56:06.763822 sshd[1356]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:06.764000 audit[1356]: USER_END pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:06.764000 audit[1356]: CRED_DISP pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:06.766696 systemd[1]: sshd@6-10.0.0.14:22-10.0.0.1:37544.service: Deactivated successfully. Dec 13 13:56:06.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.14:22-10.0.0.1:37544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:06.767427 systemd[1]: session-7.scope: Deactivated successfully. Dec 13 13:56:06.767593 systemd[1]: session-7.scope: Consumed 8.227s CPU time. Dec 13 13:56:06.767957 systemd-logind[1209]: Session 7 logged out. Waiting for processes to exit. Dec 13 13:56:06.768665 systemd-logind[1209]: Removed session 7. Dec 13 13:56:08.617280 kubelet[2068]: E1213 13:56:08.616740 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:09.033886 kubelet[2068]: E1213 13:56:09.032806 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:14.836468 kubelet[2068]: E1213 13:56:14.836427 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:14.930385 kubelet[2068]: E1213 13:56:14.930351 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:14.970601 update_engine[1213]: I1213 13:56:14.970347 1213 update_attempter.cc:509] Updating boot flags... Dec 13 13:56:16.951436 kubelet[2068]: I1213 13:56:16.951394 2068 kuberuntime_manager.go:1523] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Dec 13 13:56:16.951873 env[1220]: time="2024-12-13T13:56:16.951809547Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Dec 13 13:56:16.952116 kubelet[2068]: I1213 13:56:16.952100 2068 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Dec 13 13:56:17.993455 kubelet[2068]: I1213 13:56:17.993413 2068 topology_manager.go:215] "Topology Admit Handler" podUID="ced6acae-3c6f-49f7-b5ea-ca97d534310a" podNamespace="kube-system" podName="kube-proxy-dv9ms" Dec 13 13:56:17.998953 systemd[1]: Created slice kubepods-besteffort-podced6acae_3c6f_49f7_b5ea_ca97d534310a.slice. Dec 13 13:56:18.015592 kubelet[2068]: I1213 13:56:18.015557 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/ced6acae-3c6f-49f7-b5ea-ca97d534310a-kube-proxy\") pod \"kube-proxy-dv9ms\" (UID: \"ced6acae-3c6f-49f7-b5ea-ca97d534310a\") " pod="kube-system/kube-proxy-dv9ms" Dec 13 13:56:18.015742 kubelet[2068]: I1213 13:56:18.015602 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ced6acae-3c6f-49f7-b5ea-ca97d534310a-xtables-lock\") pod \"kube-proxy-dv9ms\" (UID: \"ced6acae-3c6f-49f7-b5ea-ca97d534310a\") " pod="kube-system/kube-proxy-dv9ms" Dec 13 13:56:18.015742 kubelet[2068]: I1213 13:56:18.015633 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8x4rb\" (UniqueName: \"kubernetes.io/projected/ced6acae-3c6f-49f7-b5ea-ca97d534310a-kube-api-access-8x4rb\") pod \"kube-proxy-dv9ms\" (UID: \"ced6acae-3c6f-49f7-b5ea-ca97d534310a\") " pod="kube-system/kube-proxy-dv9ms" Dec 13 13:56:18.015742 kubelet[2068]: I1213 13:56:18.015658 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ced6acae-3c6f-49f7-b5ea-ca97d534310a-lib-modules\") pod \"kube-proxy-dv9ms\" (UID: \"ced6acae-3c6f-49f7-b5ea-ca97d534310a\") " pod="kube-system/kube-proxy-dv9ms" Dec 13 13:56:18.112585 kubelet[2068]: I1213 13:56:18.112544 2068 topology_manager.go:215] "Topology Admit Handler" podUID="5ee4fc99-bade-4573-ab2e-fbc3fa35cbe5" podNamespace="tigera-operator" podName="tigera-operator-7bc55997bb-6wkd8" Dec 13 13:56:18.118030 systemd[1]: Created slice kubepods-besteffort-pod5ee4fc99_bade_4573_ab2e_fbc3fa35cbe5.slice. Dec 13 13:56:18.216994 kubelet[2068]: I1213 13:56:18.216944 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/5ee4fc99-bade-4573-ab2e-fbc3fa35cbe5-var-lib-calico\") pod \"tigera-operator-7bc55997bb-6wkd8\" (UID: \"5ee4fc99-bade-4573-ab2e-fbc3fa35cbe5\") " pod="tigera-operator/tigera-operator-7bc55997bb-6wkd8" Dec 13 13:56:18.216994 kubelet[2068]: I1213 13:56:18.216988 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nzdkg\" (UniqueName: \"kubernetes.io/projected/5ee4fc99-bade-4573-ab2e-fbc3fa35cbe5-kube-api-access-nzdkg\") pod \"tigera-operator-7bc55997bb-6wkd8\" (UID: \"5ee4fc99-bade-4573-ab2e-fbc3fa35cbe5\") " pod="tigera-operator/tigera-operator-7bc55997bb-6wkd8" Dec 13 13:56:18.310265 kubelet[2068]: E1213 13:56:18.310157 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:18.310819 env[1220]: time="2024-12-13T13:56:18.310770838Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dv9ms,Uid:ced6acae-3c6f-49f7-b5ea-ca97d534310a,Namespace:kube-system,Attempt:0,}" Dec 13 13:56:18.329441 env[1220]: time="2024-12-13T13:56:18.329339269Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:18.329576 env[1220]: time="2024-12-13T13:56:18.329463366Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:18.329576 env[1220]: time="2024-12-13T13:56:18.329491770Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:18.329682 env[1220]: time="2024-12-13T13:56:18.329637390Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1b31c25b75f50eaf5f1234e384aadd22d7d14fba5bc53cd7c449571a55c5804d pid=2175 runtime=io.containerd.runc.v2 Dec 13 13:56:18.344800 systemd[1]: Started cri-containerd-1b31c25b75f50eaf5f1234e384aadd22d7d14fba5bc53cd7c449571a55c5804d.scope. Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.379963 kernel: kauditd_printk_skb: 10 callbacks suppressed Dec 13 13:56:18.380015 kernel: audit: type=1400 audit(1734098178.377:830): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.385153 kernel: audit: type=1400 audit(1734098178.377:831): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.385216 kernel: audit: type=1400 audit(1734098178.377:832): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.390505 kernel: audit: type=1400 audit(1734098178.377:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.390603 kernel: audit: type=1400 audit(1734098178.377:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.395874 kernel: audit: type=1400 audit(1734098178.377:835): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.395938 kernel: audit: type=1400 audit(1734098178.377:836): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.401440 kernel: audit: type=1400 audit(1734098178.377:837): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.401491 kernel: audit: type=1400 audit(1734098178.377:838): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.406612 kernel: audit: type=1400 audit(1734098178.378:839): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.378000 audit: BPF prog-id=106 op=LOAD Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2175 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333163323562373566353065616635663132333465333834616164 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2175 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333163323562373566353065616635663132333465333834616164 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.383000 audit: BPF prog-id=107 op=LOAD Dec 13 13:56:18.383000 audit[2187]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2175 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333163323562373566353065616635663132333465333834616164 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.386000 audit: BPF prog-id=108 op=LOAD Dec 13 13:56:18.386000 audit[2187]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2175 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333163323562373566353065616635663132333465333834616164 Dec 13 13:56:18.389000 audit: BPF prog-id=108 op=UNLOAD Dec 13 13:56:18.389000 audit: BPF prog-id=107 op=UNLOAD Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { perfmon } for pid=2187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit[2187]: AVC avc: denied { bpf } for pid=2187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.389000 audit: BPF prog-id=109 op=LOAD Dec 13 13:56:18.389000 audit[2187]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2175 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162333163323562373566353065616635663132333465333834616164 Dec 13 13:56:18.415456 env[1220]: time="2024-12-13T13:56:18.415173421Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dv9ms,Uid:ced6acae-3c6f-49f7-b5ea-ca97d534310a,Namespace:kube-system,Attempt:0,} returns sandbox id \"1b31c25b75f50eaf5f1234e384aadd22d7d14fba5bc53cd7c449571a55c5804d\"" Dec 13 13:56:18.416020 kubelet[2068]: E1213 13:56:18.415934 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:18.419016 env[1220]: time="2024-12-13T13:56:18.418943739Z" level=info msg="CreateContainer within sandbox \"1b31c25b75f50eaf5f1234e384aadd22d7d14fba5bc53cd7c449571a55c5804d\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Dec 13 13:56:18.421592 env[1220]: time="2024-12-13T13:56:18.420790673Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7bc55997bb-6wkd8,Uid:5ee4fc99-bade-4573-ab2e-fbc3fa35cbe5,Namespace:tigera-operator,Attempt:0,}" Dec 13 13:56:18.443623 env[1220]: time="2024-12-13T13:56:18.443571763Z" level=info msg="CreateContainer within sandbox \"1b31c25b75f50eaf5f1234e384aadd22d7d14fba5bc53cd7c449571a55c5804d\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f43337713c1d186358735823df4d0ac35bcdb9c2bf074ebd059061415ee9a595\"" Dec 13 13:56:18.445723 env[1220]: time="2024-12-13T13:56:18.444408278Z" level=info msg="StartContainer for \"f43337713c1d186358735823df4d0ac35bcdb9c2bf074ebd059061415ee9a595\"" Dec 13 13:56:18.446630 env[1220]: time="2024-12-13T13:56:18.446564974Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:18.446722 env[1220]: time="2024-12-13T13:56:18.446642825Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:18.446815 env[1220]: time="2024-12-13T13:56:18.446779003Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:18.447612 env[1220]: time="2024-12-13T13:56:18.447565271Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/311d10bce4e315a8314485f4c3825ce6cf5955c7734265e9d142b83b78a33d05 pid=2218 runtime=io.containerd.runc.v2 Dec 13 13:56:18.463143 systemd[1]: Started cri-containerd-311d10bce4e315a8314485f4c3825ce6cf5955c7734265e9d142b83b78a33d05.scope. Dec 13 13:56:18.468466 systemd[1]: Started cri-containerd-f43337713c1d186358735823df4d0ac35bcdb9c2bf074ebd059061415ee9a595.scope. Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit: BPF prog-id=110 op=LOAD Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400013db38 a2=10 a3=0 items=0 ppid=2218 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316431306263653465333135613833313434383566346333383235 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400013d5a0 a2=3c a3=0 items=0 ppid=2218 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316431306263653465333135613833313434383566346333383235 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.486000 audit: BPF prog-id=111 op=LOAD Dec 13 13:56:18.486000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400013d8e0 a2=78 a3=0 items=0 ppid=2218 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316431306263653465333135613833313434383566346333383235 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit: BPF prog-id=112 op=LOAD Dec 13 13:56:18.488000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400013d670 a2=78 a3=0 items=0 ppid=2218 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316431306263653465333135613833313434383566346333383235 Dec 13 13:56:18.488000 audit: BPF prog-id=112 op=UNLOAD Dec 13 13:56:18.488000 audit: BPF prog-id=111 op=UNLOAD Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { perfmon } for pid=2232 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit[2232]: AVC avc: denied { bpf } for pid=2232 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.488000 audit: BPF prog-id=113 op=LOAD Dec 13 13:56:18.488000 audit[2232]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400013db40 a2=78 a3=0 items=0 ppid=2218 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316431306263653465333135613833313434383566346333383235 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2175 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333333373731336331643138363335383733353832336466346430 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit: BPF prog-id=114 op=LOAD Dec 13 13:56:18.505000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2175 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333333373731336331643138363335383733353832336466346430 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.505000 audit: BPF prog-id=115 op=LOAD Dec 13 13:56:18.505000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2175 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333333373731336331643138363335383733353832336466346430 Dec 13 13:56:18.505000 audit: BPF prog-id=115 op=UNLOAD Dec 13 13:56:18.506000 audit: BPF prog-id=114 op=UNLOAD Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { perfmon } for pid=2240 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit[2240]: AVC avc: denied { bpf } for pid=2240 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:18.506000 audit: BPF prog-id=116 op=LOAD Dec 13 13:56:18.506000 audit[2240]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2175 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634333333373731336331643138363335383733353832336466346430 Dec 13 13:56:18.511035 env[1220]: time="2024-12-13T13:56:18.510989185Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7bc55997bb-6wkd8,Uid:5ee4fc99-bade-4573-ab2e-fbc3fa35cbe5,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"311d10bce4e315a8314485f4c3825ce6cf5955c7734265e9d142b83b78a33d05\"" Dec 13 13:56:18.513504 env[1220]: time="2024-12-13T13:56:18.513461845Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\"" Dec 13 13:56:18.526328 env[1220]: time="2024-12-13T13:56:18.526280046Z" level=info msg="StartContainer for \"f43337713c1d186358735823df4d0ac35bcdb9c2bf074ebd059061415ee9a595\" returns successfully" Dec 13 13:56:18.644000 audit[2312]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.644000 audit[2312]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc0da2930 a2=0 a3=1 items=0 ppid=2264 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.644000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Dec 13 13:56:18.645000 audit[2313]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.645000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc1ffce60 a2=0 a3=1 items=0 ppid=2264 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.645000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Dec 13 13:56:18.646000 audit[2314]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.646000 audit[2314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff85bac90 a2=0 a3=1 items=0 ppid=2264 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.646000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Dec 13 13:56:18.648000 audit[2316]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.648000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf1c47d0 a2=0 a3=1 items=0 ppid=2264 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.648000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Dec 13 13:56:18.648000 audit[2315]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.648000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec6d2570 a2=0 a3=1 items=0 ppid=2264 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.648000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Dec 13 13:56:18.650000 audit[2317]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.650000 audit[2317]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9b1d910 a2=0 a3=1 items=0 ppid=2264 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Dec 13 13:56:18.746000 audit[2318]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.746000 audit[2318]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffef0845e0 a2=0 a3=1 items=0 ppid=2264 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Dec 13 13:56:18.750000 audit[2320]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.750000 audit[2320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffef857270 a2=0 a3=1 items=0 ppid=2264 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Dec 13 13:56:18.756000 audit[2323]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.756000 audit[2323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff2447540 a2=0 a3=1 items=0 ppid=2264 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Dec 13 13:56:18.757000 audit[2324]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.757000 audit[2324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd30e7280 a2=0 a3=1 items=0 ppid=2264 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.757000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Dec 13 13:56:18.759000 audit[2326]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.759000 audit[2326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd90a1490 a2=0 a3=1 items=0 ppid=2264 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.759000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Dec 13 13:56:18.760000 audit[2327]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.760000 audit[2327]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea422520 a2=0 a3=1 items=0 ppid=2264 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Dec 13 13:56:18.763000 audit[2329]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.763000 audit[2329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc80ab290 a2=0 a3=1 items=0 ppid=2264 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Dec 13 13:56:18.766000 audit[2332]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.766000 audit[2332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc6c39ad0 a2=0 a3=1 items=0 ppid=2264 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Dec 13 13:56:18.767000 audit[2333]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.767000 audit[2333]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdaf67bb0 a2=0 a3=1 items=0 ppid=2264 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Dec 13 13:56:18.770000 audit[2335]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.770000 audit[2335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe4861630 a2=0 a3=1 items=0 ppid=2264 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Dec 13 13:56:18.771000 audit[2336]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.771000 audit[2336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe2e19350 a2=0 a3=1 items=0 ppid=2264 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Dec 13 13:56:18.773000 audit[2338]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.773000 audit[2338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc18d6450 a2=0 a3=1 items=0 ppid=2264 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.773000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Dec 13 13:56:18.776000 audit[2341]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.776000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd3ab2a80 a2=0 a3=1 items=0 ppid=2264 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.776000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Dec 13 13:56:18.780000 audit[2344]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.780000 audit[2344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcfb31c60 a2=0 a3=1 items=0 ppid=2264 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.780000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Dec 13 13:56:18.781000 audit[2345]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.781000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffef64be90 a2=0 a3=1 items=0 ppid=2264 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Dec 13 13:56:18.783000 audit[2347]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.783000 audit[2347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd19f92b0 a2=0 a3=1 items=0 ppid=2264 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 13:56:18.787000 audit[2350]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.787000 audit[2350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd2ddff80 a2=0 a3=1 items=0 ppid=2264 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.787000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 13:56:18.788000 audit[2351]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.788000 audit[2351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0a1ee20 a2=0 a3=1 items=0 ppid=2264 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.788000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Dec 13 13:56:18.790000 audit[2353]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Dec 13 13:56:18.790000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffcd7b9120 a2=0 a3=1 items=0 ppid=2264 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.790000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Dec 13 13:56:18.811000 audit[2359]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:18.811000 audit[2359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=fffff6f87580 a2=0 a3=1 items=0 ppid=2264 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.811000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:18.821000 audit[2359]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:18.821000 audit[2359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffff6f87580 a2=0 a3=1 items=0 ppid=2264 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.821000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:18.822000 audit[2364]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.822000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe4c1c0d0 a2=0 a3=1 items=0 ppid=2264 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.822000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Dec 13 13:56:18.824000 audit[2366]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.824000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd3889330 a2=0 a3=1 items=0 ppid=2264 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Dec 13 13:56:18.828000 audit[2369]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.828000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd98685a0 a2=0 a3=1 items=0 ppid=2264 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Dec 13 13:56:18.829000 audit[2370]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.829000 audit[2370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf0fee80 a2=0 a3=1 items=0 ppid=2264 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.829000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Dec 13 13:56:18.831000 audit[2372]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.831000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc4cd2760 a2=0 a3=1 items=0 ppid=2264 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.831000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Dec 13 13:56:18.832000 audit[2373]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.832000 audit[2373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef2e41a0 a2=0 a3=1 items=0 ppid=2264 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Dec 13 13:56:18.834000 audit[2375]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.834000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd31ad950 a2=0 a3=1 items=0 ppid=2264 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.834000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Dec 13 13:56:18.837000 audit[2378]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2378 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.837000 audit[2378]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff7459a90 a2=0 a3=1 items=0 ppid=2264 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Dec 13 13:56:18.838000 audit[2379]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.838000 audit[2379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9c13090 a2=0 a3=1 items=0 ppid=2264 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Dec 13 13:56:18.841000 audit[2381]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2381 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.841000 audit[2381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffe1e5460 a2=0 a3=1 items=0 ppid=2264 pid=2381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.841000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Dec 13 13:56:18.842000 audit[2382]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.842000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe27db110 a2=0 a3=1 items=0 ppid=2264 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Dec 13 13:56:18.844000 audit[2384]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.844000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff0574f10 a2=0 a3=1 items=0 ppid=2264 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Dec 13 13:56:18.847000 audit[2387]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.847000 audit[2387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff23b3c00 a2=0 a3=1 items=0 ppid=2264 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Dec 13 13:56:18.850000 audit[2390]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.850000 audit[2390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc96f6ba0 a2=0 a3=1 items=0 ppid=2264 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Dec 13 13:56:18.851000 audit[2391]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.851000 audit[2391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff017ec30 a2=0 a3=1 items=0 ppid=2264 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.851000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Dec 13 13:56:18.853000 audit[2393]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.853000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe50bdfb0 a2=0 a3=1 items=0 ppid=2264 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.853000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 13:56:18.856000 audit[2396]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.856000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffdb108800 a2=0 a3=1 items=0 ppid=2264 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.856000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Dec 13 13:56:18.857000 audit[2397]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.857000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe91df5e0 a2=0 a3=1 items=0 ppid=2264 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Dec 13 13:56:18.859000 audit[2399]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.859000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd89807b0 a2=0 a3=1 items=0 ppid=2264 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.859000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Dec 13 13:56:18.860000 audit[2400]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2400 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.860000 audit[2400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe7e81600 a2=0 a3=1 items=0 ppid=2264 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Dec 13 13:56:18.862000 audit[2402]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.862000 audit[2402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd5780da0 a2=0 a3=1 items=0 ppid=2264 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.862000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 13:56:18.865000 audit[2405]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2405 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Dec 13 13:56:18.865000 audit[2405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff05acae0 a2=0 a3=1 items=0 ppid=2264 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.865000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Dec 13 13:56:18.868000 audit[2407]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Dec 13 13:56:18.868000 audit[2407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2004 a0=3 a1=fffff7c41b00 a2=0 a3=1 items=0 ppid=2264 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.868000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:18.868000 audit[2407]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Dec 13 13:56:18.868000 audit[2407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffff7c41b00 a2=0 a3=1 items=0 ppid=2264 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:18.868000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:19.051888 kubelet[2068]: E1213 13:56:19.050254 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:19.059816 kubelet[2068]: I1213 13:56:19.059606 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-dv9ms" podStartSLOduration=2.059589377 podStartE2EDuration="2.059589377s" podCreationTimestamp="2024-12-13 13:56:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 13:56:19.058729265 +0000 UTC m=+17.128058776" watchObservedRunningTime="2024-12-13 13:56:19.059589377 +0000 UTC m=+17.128918888" Dec 13 13:56:20.239499 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2417469907.mount: Deactivated successfully. Dec 13 13:56:20.710093 env[1220]: time="2024-12-13T13:56:20.710041806Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:20.711305 env[1220]: time="2024-12-13T13:56:20.711266359Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30d521e4e84764b396aacbb2a373ca7a573f84571e3955b34329652acccfb73c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:20.712993 env[1220]: time="2024-12-13T13:56:20.712952089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:20.714317 env[1220]: time="2024-12-13T13:56:20.714258772Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:fc9ea45f2475fd99db1b36d2ff180a50017b1a5ea0e82a171c6b439b3a620764,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:20.714916 env[1220]: time="2024-12-13T13:56:20.714728151Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\" returns image reference \"sha256:30d521e4e84764b396aacbb2a373ca7a573f84571e3955b34329652acccfb73c\"" Dec 13 13:56:20.717417 env[1220]: time="2024-12-13T13:56:20.716910544Z" level=info msg="CreateContainer within sandbox \"311d10bce4e315a8314485f4c3825ce6cf5955c7734265e9d142b83b78a33d05\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Dec 13 13:56:20.727567 env[1220]: time="2024-12-13T13:56:20.727522509Z" level=info msg="CreateContainer within sandbox \"311d10bce4e315a8314485f4c3825ce6cf5955c7734265e9d142b83b78a33d05\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"168fbdbeaaf42ab2fca980ad563c730d0afb48a5f13b68c37bb08c0c4b2bf934\"" Dec 13 13:56:20.727953 env[1220]: time="2024-12-13T13:56:20.727932280Z" level=info msg="StartContainer for \"168fbdbeaaf42ab2fca980ad563c730d0afb48a5f13b68c37bb08c0c4b2bf934\"" Dec 13 13:56:20.743006 systemd[1]: Started cri-containerd-168fbdbeaaf42ab2fca980ad563c730d0afb48a5f13b68c37bb08c0c4b2bf934.scope. Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.762000 audit: BPF prog-id=117 op=LOAD Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2218 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:20.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136386662646265616166343261623266636139383061643536336337 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2218 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:20.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136386662646265616166343261623266636139383061643536336337 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit: BPF prog-id=118 op=LOAD Dec 13 13:56:20.763000 audit[2415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2218 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:20.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136386662646265616166343261623266636139383061643536336337 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit: BPF prog-id=119 op=LOAD Dec 13 13:56:20.763000 audit[2415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2218 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:20.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136386662646265616166343261623266636139383061643536336337 Dec 13 13:56:20.763000 audit: BPF prog-id=119 op=UNLOAD Dec 13 13:56:20.763000 audit: BPF prog-id=118 op=UNLOAD Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { perfmon } for pid=2415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit[2415]: AVC avc: denied { bpf } for pid=2415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:20.763000 audit: BPF prog-id=120 op=LOAD Dec 13 13:56:20.763000 audit[2415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2218 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:20.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136386662646265616166343261623266636139383061643536336337 Dec 13 13:56:20.780360 env[1220]: time="2024-12-13T13:56:20.780300899Z" level=info msg="StartContainer for \"168fbdbeaaf42ab2fca980ad563c730d0afb48a5f13b68c37bb08c0c4b2bf934\" returns successfully" Dec 13 13:56:24.946772 kernel: kauditd_printk_skb: 357 callbacks suppressed Dec 13 13:56:24.946870 kernel: audit: type=1325 audit(1734098184.943:941): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:24.943000 audit[2450]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:24.950856 kernel: audit: type=1300 audit(1734098184.943:941): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffffaf3a6d0 a2=0 a3=1 items=0 ppid=2264 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:24.943000 audit[2450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffffaf3a6d0 a2=0 a3=1 items=0 ppid=2264 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:24.943000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:24.953378 kernel: audit: type=1327 audit(1734098184.943:941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:24.954000 audit[2450]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:24.954000 audit[2450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffaf3a6d0 a2=0 a3=1 items=0 ppid=2264 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:24.960854 kernel: audit: type=1325 audit(1734098184.954:942): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2450 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:24.960906 kernel: audit: type=1300 audit(1734098184.954:942): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffaf3a6d0 a2=0 a3=1 items=0 ppid=2264 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:24.954000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:24.962871 kernel: audit: type=1327 audit(1734098184.954:942): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:24.968000 audit[2452]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:24.968000 audit[2452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff9909f80 a2=0 a3=1 items=0 ppid=2264 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:24.974805 kernel: audit: type=1325 audit(1734098184.968:943): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:24.974855 kernel: audit: type=1300 audit(1734098184.968:943): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff9909f80 a2=0 a3=1 items=0 ppid=2264 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:24.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:24.976660 kernel: audit: type=1327 audit(1734098184.968:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:24.978000 audit[2452]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:24.978000 audit[2452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff9909f80 a2=0 a3=1 items=0 ppid=2264 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:24.978000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:24.981390 kernel: audit: type=1325 audit(1734098184.978:944): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2452 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:25.074777 kubelet[2068]: I1213 13:56:25.074700 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7bc55997bb-6wkd8" podStartSLOduration=4.871415859 podStartE2EDuration="7.074672066s" podCreationTimestamp="2024-12-13 13:56:18 +0000 UTC" firstStartedPulling="2024-12-13 13:56:18.512507473 +0000 UTC m=+16.581836984" lastFinishedPulling="2024-12-13 13:56:20.71576368 +0000 UTC m=+18.785093191" observedRunningTime="2024-12-13 13:56:21.06309238 +0000 UTC m=+19.132421931" watchObservedRunningTime="2024-12-13 13:56:25.074672066 +0000 UTC m=+23.144001577" Dec 13 13:56:25.075141 kubelet[2068]: I1213 13:56:25.074927 2068 topology_manager.go:215] "Topology Admit Handler" podUID="0c193759-8e7a-485a-9821-9fdba257f822" podNamespace="calico-system" podName="calico-typha-c8bf58d6b-pphtd" Dec 13 13:56:25.081312 systemd[1]: Created slice kubepods-besteffort-pod0c193759_8e7a_485a_9821_9fdba257f822.slice. Dec 13 13:56:25.165369 kubelet[2068]: I1213 13:56:25.165290 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qzmkx\" (UniqueName: \"kubernetes.io/projected/0c193759-8e7a-485a-9821-9fdba257f822-kube-api-access-qzmkx\") pod \"calico-typha-c8bf58d6b-pphtd\" (UID: \"0c193759-8e7a-485a-9821-9fdba257f822\") " pod="calico-system/calico-typha-c8bf58d6b-pphtd" Dec 13 13:56:25.165369 kubelet[2068]: I1213 13:56:25.165336 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0c193759-8e7a-485a-9821-9fdba257f822-tigera-ca-bundle\") pod \"calico-typha-c8bf58d6b-pphtd\" (UID: \"0c193759-8e7a-485a-9821-9fdba257f822\") " pod="calico-system/calico-typha-c8bf58d6b-pphtd" Dec 13 13:56:25.165369 kubelet[2068]: I1213 13:56:25.165366 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/0c193759-8e7a-485a-9821-9fdba257f822-typha-certs\") pod \"calico-typha-c8bf58d6b-pphtd\" (UID: \"0c193759-8e7a-485a-9821-9fdba257f822\") " pod="calico-system/calico-typha-c8bf58d6b-pphtd" Dec 13 13:56:25.176965 kubelet[2068]: I1213 13:56:25.176908 2068 topology_manager.go:215] "Topology Admit Handler" podUID="6a261bb1-95b0-48bb-b46f-7c3ad2486d57" podNamespace="calico-system" podName="calico-node-9cchc" Dec 13 13:56:25.183332 systemd[1]: Created slice kubepods-besteffort-pod6a261bb1_95b0_48bb_b46f_7c3ad2486d57.slice. Dec 13 13:56:25.266139 kubelet[2068]: I1213 13:56:25.266024 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-policysync\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266139 kubelet[2068]: I1213 13:56:25.266063 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-cni-bin-dir\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266139 kubelet[2068]: I1213 13:56:25.266082 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-cni-net-dir\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266139 kubelet[2068]: I1213 13:56:25.266097 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-cni-log-dir\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266139 kubelet[2068]: I1213 13:56:25.266114 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-flexvol-driver-host\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266369 kubelet[2068]: I1213 13:56:25.266134 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-node-certs\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266369 kubelet[2068]: I1213 13:56:25.266163 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-var-run-calico\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266369 kubelet[2068]: I1213 13:56:25.266178 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-var-lib-calico\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266369 kubelet[2068]: I1213 13:56:25.266204 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-tigera-ca-bundle\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266369 kubelet[2068]: I1213 13:56:25.266219 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mdj8z\" (UniqueName: \"kubernetes.io/projected/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-kube-api-access-mdj8z\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266487 kubelet[2068]: I1213 13:56:25.266243 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-lib-modules\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.266487 kubelet[2068]: I1213 13:56:25.266258 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a261bb1-95b0-48bb-b46f-7c3ad2486d57-xtables-lock\") pod \"calico-node-9cchc\" (UID: \"6a261bb1-95b0-48bb-b46f-7c3ad2486d57\") " pod="calico-system/calico-node-9cchc" Dec 13 13:56:25.290855 kubelet[2068]: I1213 13:56:25.290805 2068 topology_manager.go:215] "Topology Admit Handler" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" podNamespace="calico-system" podName="csi-node-driver-nk6d6" Dec 13 13:56:25.291082 kubelet[2068]: E1213 13:56:25.291056 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nk6d6" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" Dec 13 13:56:25.367258 kubelet[2068]: I1213 13:56:25.367208 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/9baa3386-bb08-4023-b9a1-0a8007c16bf7-varrun\") pod \"csi-node-driver-nk6d6\" (UID: \"9baa3386-bb08-4023-b9a1-0a8007c16bf7\") " pod="calico-system/csi-node-driver-nk6d6" Dec 13 13:56:25.367430 kubelet[2068]: I1213 13:56:25.367252 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/9baa3386-bb08-4023-b9a1-0a8007c16bf7-registration-dir\") pod \"csi-node-driver-nk6d6\" (UID: \"9baa3386-bb08-4023-b9a1-0a8007c16bf7\") " pod="calico-system/csi-node-driver-nk6d6" Dec 13 13:56:25.367430 kubelet[2068]: I1213 13:56:25.367397 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/9baa3386-bb08-4023-b9a1-0a8007c16bf7-socket-dir\") pod \"csi-node-driver-nk6d6\" (UID: \"9baa3386-bb08-4023-b9a1-0a8007c16bf7\") " pod="calico-system/csi-node-driver-nk6d6" Dec 13 13:56:25.367499 kubelet[2068]: I1213 13:56:25.367472 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j5lpb\" (UniqueName: \"kubernetes.io/projected/9baa3386-bb08-4023-b9a1-0a8007c16bf7-kube-api-access-j5lpb\") pod \"csi-node-driver-nk6d6\" (UID: \"9baa3386-bb08-4023-b9a1-0a8007c16bf7\") " pod="calico-system/csi-node-driver-nk6d6" Dec 13 13:56:25.367527 kubelet[2068]: I1213 13:56:25.367509 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/9baa3386-bb08-4023-b9a1-0a8007c16bf7-kubelet-dir\") pod \"csi-node-driver-nk6d6\" (UID: \"9baa3386-bb08-4023-b9a1-0a8007c16bf7\") " pod="calico-system/csi-node-driver-nk6d6" Dec 13 13:56:25.368700 kubelet[2068]: E1213 13:56:25.368679 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.368700 kubelet[2068]: W1213 13:56:25.368699 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.368785 kubelet[2068]: E1213 13:56:25.368726 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.368902 kubelet[2068]: E1213 13:56:25.368885 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.368902 kubelet[2068]: W1213 13:56:25.368896 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.368957 kubelet[2068]: E1213 13:56:25.368911 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.369259 kubelet[2068]: E1213 13:56:25.369216 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.369322 kubelet[2068]: W1213 13:56:25.369258 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.369322 kubelet[2068]: E1213 13:56:25.369295 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.369747 kubelet[2068]: E1213 13:56:25.369647 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.369801 kubelet[2068]: W1213 13:56:25.369755 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.369801 kubelet[2068]: E1213 13:56:25.369775 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.369983 kubelet[2068]: E1213 13:56:25.369956 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.369983 kubelet[2068]: W1213 13:56:25.369972 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.369983 kubelet[2068]: E1213 13:56:25.369982 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.370150 kubelet[2068]: E1213 13:56:25.370128 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.370150 kubelet[2068]: W1213 13:56:25.370143 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.370223 kubelet[2068]: E1213 13:56:25.370202 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.370421 kubelet[2068]: E1213 13:56:25.370400 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.370467 kubelet[2068]: W1213 13:56:25.370414 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.370467 kubelet[2068]: E1213 13:56:25.370452 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.370741 kubelet[2068]: E1213 13:56:25.370723 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.370741 kubelet[2068]: W1213 13:56:25.370738 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.370794 kubelet[2068]: E1213 13:56:25.370749 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.371031 kubelet[2068]: E1213 13:56:25.371015 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.371031 kubelet[2068]: W1213 13:56:25.371031 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.371088 kubelet[2068]: E1213 13:56:25.371042 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.372461 kubelet[2068]: E1213 13:56:25.372442 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.372461 kubelet[2068]: W1213 13:56:25.372459 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.372522 kubelet[2068]: E1213 13:56:25.372473 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.378620 kubelet[2068]: E1213 13:56:25.374677 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.378620 kubelet[2068]: W1213 13:56:25.374695 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.378620 kubelet[2068]: E1213 13:56:25.374708 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.383790 kubelet[2068]: E1213 13:56:25.383749 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:25.383986 kubelet[2068]: E1213 13:56:25.383959 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.383986 kubelet[2068]: W1213 13:56:25.383975 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.384058 kubelet[2068]: E1213 13:56:25.383991 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.385708 env[1220]: time="2024-12-13T13:56:25.385663147Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-c8bf58d6b-pphtd,Uid:0c193759-8e7a-485a-9821-9fdba257f822,Namespace:calico-system,Attempt:0,}" Dec 13 13:56:25.413192 env[1220]: time="2024-12-13T13:56:25.413113327Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:25.413467 env[1220]: time="2024-12-13T13:56:25.413412957Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:25.413529 env[1220]: time="2024-12-13T13:56:25.413470443Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:25.413704 env[1220]: time="2024-12-13T13:56:25.413662942Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5a3c99049b6372419576694661cc8203a6e90315a79b5a1e9296e2526b8cb574 pid=2475 runtime=io.containerd.runc.v2 Dec 13 13:56:25.426450 systemd[1]: Started cri-containerd-5a3c99049b6372419576694661cc8203a6e90315a79b5a1e9296e2526b8cb574.scope. Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit: BPF prog-id=121 op=LOAD Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2475 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561336339393034396236333732343139353736363934363631636338 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2475 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561336339393034396236333732343139353736363934363631636338 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit: BPF prog-id=122 op=LOAD Dec 13 13:56:25.455000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2475 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561336339393034396236333732343139353736363934363631636338 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit: BPF prog-id=123 op=LOAD Dec 13 13:56:25.455000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2475 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561336339393034396236333732343139353736363934363631636338 Dec 13 13:56:25.455000 audit: BPF prog-id=123 op=UNLOAD Dec 13 13:56:25.455000 audit: BPF prog-id=122 op=UNLOAD Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.455000 audit: BPF prog-id=124 op=LOAD Dec 13 13:56:25.455000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2475 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561336339393034396236333732343139353736363934363631636338 Dec 13 13:56:25.468384 kubelet[2068]: E1213 13:56:25.468337 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.468494 kubelet[2068]: W1213 13:56:25.468392 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.468494 kubelet[2068]: E1213 13:56:25.468411 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.468666 kubelet[2068]: E1213 13:56:25.468646 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.468666 kubelet[2068]: W1213 13:56:25.468660 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.468723 kubelet[2068]: E1213 13:56:25.468674 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.468887 kubelet[2068]: E1213 13:56:25.468867 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.468887 kubelet[2068]: W1213 13:56:25.468878 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.468946 kubelet[2068]: E1213 13:56:25.468890 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.469086 kubelet[2068]: E1213 13:56:25.469070 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.469086 kubelet[2068]: W1213 13:56:25.469083 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.469155 kubelet[2068]: E1213 13:56:25.469095 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.469306 kubelet[2068]: E1213 13:56:25.469284 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.469306 kubelet[2068]: W1213 13:56:25.469298 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.469384 kubelet[2068]: E1213 13:56:25.469310 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.469615 kubelet[2068]: E1213 13:56:25.469566 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.469615 kubelet[2068]: W1213 13:56:25.469581 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.469615 kubelet[2068]: E1213 13:56:25.469594 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.469772 kubelet[2068]: E1213 13:56:25.469754 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.469772 kubelet[2068]: W1213 13:56:25.469766 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.469838 kubelet[2068]: E1213 13:56:25.469816 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.470017 kubelet[2068]: E1213 13:56:25.470001 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.470017 kubelet[2068]: W1213 13:56:25.470013 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.470095 kubelet[2068]: E1213 13:56:25.470033 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.470175 kubelet[2068]: E1213 13:56:25.470152 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.470175 kubelet[2068]: W1213 13:56:25.470167 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.470259 kubelet[2068]: E1213 13:56:25.470238 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.470313 kubelet[2068]: E1213 13:56:25.470299 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.470313 kubelet[2068]: W1213 13:56:25.470309 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.470418 kubelet[2068]: E1213 13:56:25.470397 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.470554 kubelet[2068]: E1213 13:56:25.470542 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.470554 kubelet[2068]: W1213 13:56:25.470554 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.470652 kubelet[2068]: E1213 13:56:25.470630 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.470725 kubelet[2068]: E1213 13:56:25.470709 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.470758 kubelet[2068]: W1213 13:56:25.470726 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.470758 kubelet[2068]: E1213 13:56:25.470739 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.471053 kubelet[2068]: E1213 13:56:25.471040 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.471053 kubelet[2068]: W1213 13:56:25.471052 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.471125 kubelet[2068]: E1213 13:56:25.471066 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.471258 kubelet[2068]: E1213 13:56:25.471245 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.471258 kubelet[2068]: W1213 13:56:25.471257 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.471332 kubelet[2068]: E1213 13:56:25.471270 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.477256 kubelet[2068]: E1213 13:56:25.476959 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.477256 kubelet[2068]: W1213 13:56:25.476982 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.477256 kubelet[2068]: E1213 13:56:25.477016 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.477617 kubelet[2068]: E1213 13:56:25.477603 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.477617 kubelet[2068]: W1213 13:56:25.477617 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.477694 kubelet[2068]: E1213 13:56:25.477648 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.477783 kubelet[2068]: E1213 13:56:25.477772 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.477783 kubelet[2068]: W1213 13:56:25.477782 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.477894 kubelet[2068]: E1213 13:56:25.477863 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.477940 kubelet[2068]: E1213 13:56:25.477906 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.477940 kubelet[2068]: W1213 13:56:25.477912 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.478026 kubelet[2068]: E1213 13:56:25.478004 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.478066 kubelet[2068]: E1213 13:56:25.478052 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.478066 kubelet[2068]: W1213 13:56:25.478059 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.478126 kubelet[2068]: E1213 13:56:25.478071 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.478467 kubelet[2068]: E1213 13:56:25.478413 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.478467 kubelet[2068]: W1213 13:56:25.478427 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.478467 kubelet[2068]: E1213 13:56:25.478442 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.478981 kubelet[2068]: E1213 13:56:25.478944 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.478981 kubelet[2068]: W1213 13:56:25.478955 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.478981 kubelet[2068]: E1213 13:56:25.478970 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.479149 kubelet[2068]: E1213 13:56:25.479137 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.479149 kubelet[2068]: W1213 13:56:25.479147 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.479221 kubelet[2068]: E1213 13:56:25.479160 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.479333 kubelet[2068]: E1213 13:56:25.479320 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.479333 kubelet[2068]: W1213 13:56:25.479332 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.479500 kubelet[2068]: E1213 13:56:25.479447 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.479547 kubelet[2068]: E1213 13:56:25.479509 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.479547 kubelet[2068]: W1213 13:56:25.479517 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.479547 kubelet[2068]: E1213 13:56:25.479525 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.479694 kubelet[2068]: E1213 13:56:25.479682 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.479694 kubelet[2068]: W1213 13:56:25.479693 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.479764 kubelet[2068]: E1213 13:56:25.479701 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.485539 env[1220]: time="2024-12-13T13:56:25.485498072Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-c8bf58d6b-pphtd,Uid:0c193759-8e7a-485a-9821-9fdba257f822,Namespace:calico-system,Attempt:0,} returns sandbox id \"5a3c99049b6372419576694661cc8203a6e90315a79b5a1e9296e2526b8cb574\"" Dec 13 13:56:25.488478 kubelet[2068]: E1213 13:56:25.485902 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:25.489523 env[1220]: time="2024-12-13T13:56:25.489471789Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9cchc,Uid:6a261bb1-95b0-48bb-b46f-7c3ad2486d57,Namespace:calico-system,Attempt:0,}" Dec 13 13:56:25.489785 kubelet[2068]: E1213 13:56:25.489759 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:25.489785 kubelet[2068]: E1213 13:56:25.489779 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:25.489904 kubelet[2068]: W1213 13:56:25.489791 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:25.489904 kubelet[2068]: E1213 13:56:25.489805 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:25.490851 env[1220]: time="2024-12-13T13:56:25.490535055Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\"" Dec 13 13:56:25.505045 env[1220]: time="2024-12-13T13:56:25.504969896Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:25.505045 env[1220]: time="2024-12-13T13:56:25.505008539Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:25.505045 env[1220]: time="2024-12-13T13:56:25.505018701Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:25.505230 env[1220]: time="2024-12-13T13:56:25.505139393Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374 pid=2542 runtime=io.containerd.runc.v2 Dec 13 13:56:25.514889 systemd[1]: Started cri-containerd-45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374.scope. Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.537000 audit: BPF prog-id=125 op=LOAD Dec 13 13:56:25.541000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.541000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2542 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.541000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313536323032613731333632313431363363346436613632663930 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2542 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313536323032613731333632313431363363346436613632663930 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.542000 audit: BPF prog-id=126 op=LOAD Dec 13 13:56:25.542000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2542 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313536323032613731333632313431363363346436613632663930 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit: BPF prog-id=127 op=LOAD Dec 13 13:56:25.544000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2542 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313536323032613731333632313431363363346436613632663930 Dec 13 13:56:25.544000 audit: BPF prog-id=127 op=UNLOAD Dec 13 13:56:25.544000 audit: BPF prog-id=126 op=UNLOAD Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:25.544000 audit: BPF prog-id=128 op=LOAD Dec 13 13:56:25.544000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2542 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313536323032613731333632313431363363346436613632663930 Dec 13 13:56:25.558403 env[1220]: time="2024-12-13T13:56:25.558340183Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-9cchc,Uid:6a261bb1-95b0-48bb-b46f-7c3ad2486d57,Namespace:calico-system,Attempt:0,} returns sandbox id \"45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374\"" Dec 13 13:56:25.559181 kubelet[2068]: E1213 13:56:25.558970 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:25.999000 audit[2577]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:25.999000 audit[2577]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6652 a0=3 a1=fffff6e9ecc0 a2=0 a3=1 items=0 ppid=2264 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:25.999000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:26.004000 audit[2577]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:26.004000 audit[2577]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff6e9ecc0 a2=0 a3=1 items=0 ppid=2264 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:26.004000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:26.475118 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4061725181.mount: Deactivated successfully. Dec 13 13:56:27.012976 kubelet[2068]: E1213 13:56:27.012929 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nk6d6" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" Dec 13 13:56:27.487138 env[1220]: time="2024-12-13T13:56:27.487094798Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:27.488408 env[1220]: time="2024-12-13T13:56:27.488377276Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d1fc316829ae1650b0b1629b54232520f297e7c3b1444eecd290ae088902a28,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:27.489695 env[1220]: time="2024-12-13T13:56:27.489660154Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:27.490854 env[1220]: time="2024-12-13T13:56:27.490819620Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:768a194e1115c73bcbf35edb7afd18a63e16e08d940c79993565b6a3cca2da7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:27.491386 env[1220]: time="2024-12-13T13:56:27.491334827Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\" returns image reference \"sha256:1d1fc316829ae1650b0b1629b54232520f297e7c3b1444eecd290ae088902a28\"" Dec 13 13:56:27.501416 env[1220]: time="2024-12-13T13:56:27.500162998Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\"" Dec 13 13:56:27.504327 env[1220]: time="2024-12-13T13:56:27.504290017Z" level=info msg="CreateContainer within sandbox \"5a3c99049b6372419576694661cc8203a6e90315a79b5a1e9296e2526b8cb574\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Dec 13 13:56:27.517824 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1697703722.mount: Deactivated successfully. Dec 13 13:56:27.520662 env[1220]: time="2024-12-13T13:56:27.520626558Z" level=info msg="CreateContainer within sandbox \"5a3c99049b6372419576694661cc8203a6e90315a79b5a1e9296e2526b8cb574\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"69a773bc3e782f540f6fe3eb216b12530eed953325cebd86ecb1fe5beeea479a\"" Dec 13 13:56:27.521173 env[1220]: time="2024-12-13T13:56:27.521113443Z" level=info msg="StartContainer for \"69a773bc3e782f540f6fe3eb216b12530eed953325cebd86ecb1fe5beeea479a\"" Dec 13 13:56:27.540264 systemd[1]: Started cri-containerd-69a773bc3e782f540f6fe3eb216b12530eed953325cebd86ecb1fe5beeea479a.scope. Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit: BPF prog-id=129 op=LOAD Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2475 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:27.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639613737336263336537383266353430663666653365623231366231 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2475 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:27.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639613737336263336537383266353430663666653365623231366231 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit: BPF prog-id=130 op=LOAD Dec 13 13:56:27.571000 audit[2588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2475 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:27.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639613737336263336537383266353430663666653365623231366231 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit: BPF prog-id=131 op=LOAD Dec 13 13:56:27.571000 audit[2588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2475 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:27.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639613737336263336537383266353430663666653365623231366231 Dec 13 13:56:27.571000 audit: BPF prog-id=131 op=UNLOAD Dec 13 13:56:27.571000 audit: BPF prog-id=130 op=UNLOAD Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { perfmon } for pid=2588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit[2588]: AVC avc: denied { bpf } for pid=2588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:27.571000 audit: BPF prog-id=132 op=LOAD Dec 13 13:56:27.571000 audit[2588]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2475 pid=2588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:27.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639613737336263336537383266353430663666653365623231366231 Dec 13 13:56:27.592931 env[1220]: time="2024-12-13T13:56:27.592882114Z" level=info msg="StartContainer for \"69a773bc3e782f540f6fe3eb216b12530eed953325cebd86ecb1fe5beeea479a\" returns successfully" Dec 13 13:56:28.070920 kubelet[2068]: E1213 13:56:28.070876 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:28.103678 kubelet[2068]: I1213 13:56:28.103615 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-c8bf58d6b-pphtd" podStartSLOduration=1.09911758 podStartE2EDuration="3.103589212s" podCreationTimestamp="2024-12-13 13:56:25 +0000 UTC" firstStartedPulling="2024-12-13 13:56:25.490244026 +0000 UTC m=+23.559573537" lastFinishedPulling="2024-12-13 13:56:27.494715698 +0000 UTC m=+25.564045169" observedRunningTime="2024-12-13 13:56:28.100144708 +0000 UTC m=+26.169474219" watchObservedRunningTime="2024-12-13 13:56:28.103589212 +0000 UTC m=+26.172918723" Dec 13 13:56:28.168626 kubelet[2068]: E1213 13:56:28.168595 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.168626 kubelet[2068]: W1213 13:56:28.168619 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.168820 kubelet[2068]: E1213 13:56:28.168638 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.168820 kubelet[2068]: E1213 13:56:28.168797 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.168820 kubelet[2068]: W1213 13:56:28.168806 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.168820 kubelet[2068]: E1213 13:56:28.168815 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.168979 kubelet[2068]: E1213 13:56:28.168968 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.168979 kubelet[2068]: W1213 13:56:28.168979 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.169039 kubelet[2068]: E1213 13:56:28.168987 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.169138 kubelet[2068]: E1213 13:56:28.169127 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.169138 kubelet[2068]: W1213 13:56:28.169137 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.169202 kubelet[2068]: E1213 13:56:28.169146 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.169301 kubelet[2068]: E1213 13:56:28.169291 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.169301 kubelet[2068]: W1213 13:56:28.169301 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.169388 kubelet[2068]: E1213 13:56:28.169310 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.169479 kubelet[2068]: E1213 13:56:28.169468 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.169479 kubelet[2068]: W1213 13:56:28.169479 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.169547 kubelet[2068]: E1213 13:56:28.169489 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.169640 kubelet[2068]: E1213 13:56:28.169630 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.169640 kubelet[2068]: W1213 13:56:28.169641 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.169706 kubelet[2068]: E1213 13:56:28.169649 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.169846 kubelet[2068]: E1213 13:56:28.169832 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.169846 kubelet[2068]: W1213 13:56:28.169841 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.169906 kubelet[2068]: E1213 13:56:28.169849 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.170021 kubelet[2068]: E1213 13:56:28.170010 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.170021 kubelet[2068]: W1213 13:56:28.170021 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.170084 kubelet[2068]: E1213 13:56:28.170029 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.170163 kubelet[2068]: E1213 13:56:28.170154 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.170205 kubelet[2068]: W1213 13:56:28.170164 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.170205 kubelet[2068]: E1213 13:56:28.170172 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.170295 kubelet[2068]: E1213 13:56:28.170286 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.170295 kubelet[2068]: W1213 13:56:28.170295 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.170378 kubelet[2068]: E1213 13:56:28.170302 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.170434 kubelet[2068]: E1213 13:56:28.170423 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.170434 kubelet[2068]: W1213 13:56:28.170433 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.170495 kubelet[2068]: E1213 13:56:28.170441 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.170603 kubelet[2068]: E1213 13:56:28.170593 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.170603 kubelet[2068]: W1213 13:56:28.170602 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.170666 kubelet[2068]: E1213 13:56:28.170610 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.170760 kubelet[2068]: E1213 13:56:28.170746 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.170760 kubelet[2068]: W1213 13:56:28.170756 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.170823 kubelet[2068]: E1213 13:56:28.170764 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.170890 kubelet[2068]: E1213 13:56:28.170882 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.170890 kubelet[2068]: W1213 13:56:28.170890 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.170946 kubelet[2068]: E1213 13:56:28.170897 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.194269 kubelet[2068]: E1213 13:56:28.194240 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.194456 kubelet[2068]: W1213 13:56:28.194439 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.194524 kubelet[2068]: E1213 13:56:28.194511 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.194819 kubelet[2068]: E1213 13:56:28.194803 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.194911 kubelet[2068]: W1213 13:56:28.194897 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.194979 kubelet[2068]: E1213 13:56:28.194968 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.195206 kubelet[2068]: E1213 13:56:28.195167 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.195206 kubelet[2068]: W1213 13:56:28.195186 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.195206 kubelet[2068]: E1213 13:56:28.195203 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.195380 kubelet[2068]: E1213 13:56:28.195365 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.195380 kubelet[2068]: W1213 13:56:28.195379 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.195444 kubelet[2068]: E1213 13:56:28.195394 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.195563 kubelet[2068]: E1213 13:56:28.195552 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.195590 kubelet[2068]: W1213 13:56:28.195562 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.195590 kubelet[2068]: E1213 13:56:28.195574 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.195748 kubelet[2068]: E1213 13:56:28.195730 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.195748 kubelet[2068]: W1213 13:56:28.195747 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.195808 kubelet[2068]: E1213 13:56:28.195760 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.196083 kubelet[2068]: E1213 13:56:28.196068 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.196160 kubelet[2068]: W1213 13:56:28.196147 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.196234 kubelet[2068]: E1213 13:56:28.196219 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.196435 kubelet[2068]: E1213 13:56:28.196419 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.196435 kubelet[2068]: W1213 13:56:28.196432 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.196495 kubelet[2068]: E1213 13:56:28.196446 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.196596 kubelet[2068]: E1213 13:56:28.196584 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.196596 kubelet[2068]: W1213 13:56:28.196595 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.196651 kubelet[2068]: E1213 13:56:28.196608 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.196750 kubelet[2068]: E1213 13:56:28.196738 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.196778 kubelet[2068]: W1213 13:56:28.196748 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.196778 kubelet[2068]: E1213 13:56:28.196762 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.196912 kubelet[2068]: E1213 13:56:28.196902 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.196937 kubelet[2068]: W1213 13:56:28.196912 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.196937 kubelet[2068]: E1213 13:56:28.196924 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.197174 kubelet[2068]: E1213 13:56:28.197155 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.197224 kubelet[2068]: W1213 13:56:28.197173 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.197224 kubelet[2068]: E1213 13:56:28.197191 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.197348 kubelet[2068]: E1213 13:56:28.197333 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.197348 kubelet[2068]: W1213 13:56:28.197347 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.197430 kubelet[2068]: E1213 13:56:28.197377 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.197541 kubelet[2068]: E1213 13:56:28.197528 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.197541 kubelet[2068]: W1213 13:56:28.197539 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.197595 kubelet[2068]: E1213 13:56:28.197549 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.197694 kubelet[2068]: E1213 13:56:28.197682 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.197694 kubelet[2068]: W1213 13:56:28.197693 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.197751 kubelet[2068]: E1213 13:56:28.197700 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.197839 kubelet[2068]: E1213 13:56:28.197828 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.197839 kubelet[2068]: W1213 13:56:28.197838 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.197890 kubelet[2068]: E1213 13:56:28.197846 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.197989 kubelet[2068]: E1213 13:56:28.197979 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.197989 kubelet[2068]: W1213 13:56:28.197988 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.198040 kubelet[2068]: E1213 13:56:28.197996 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.198273 kubelet[2068]: E1213 13:56:28.198227 2068 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Dec 13 13:56:28.198273 kubelet[2068]: W1213 13:56:28.198239 2068 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Dec 13 13:56:28.198273 kubelet[2068]: E1213 13:56:28.198247 2068 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Dec 13 13:56:28.712306 env[1220]: time="2024-12-13T13:56:28.712246316Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:28.714079 env[1220]: time="2024-12-13T13:56:28.714039314Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ece9bca32e64e726de8bbfc9e175a3ca91e0881cd40352bfcd1d107411f4f348,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:28.716831 env[1220]: time="2024-12-13T13:56:28.716802478Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:28.717895 env[1220]: time="2024-12-13T13:56:28.717850970Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:a63f8b4ff531912d12d143664eb263fdbc6cd7b3ff4aa777dfb6e318a090462c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:28.718298 env[1220]: time="2024-12-13T13:56:28.718252526Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\" returns image reference \"sha256:ece9bca32e64e726de8bbfc9e175a3ca91e0881cd40352bfcd1d107411f4f348\"" Dec 13 13:56:28.720743 env[1220]: time="2024-12-13T13:56:28.720710863Z" level=info msg="CreateContainer within sandbox \"45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Dec 13 13:56:28.734352 env[1220]: time="2024-12-13T13:56:28.734299422Z" level=info msg="CreateContainer within sandbox \"45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea\"" Dec 13 13:56:28.734952 env[1220]: time="2024-12-13T13:56:28.734924957Z" level=info msg="StartContainer for \"2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea\"" Dec 13 13:56:28.757269 systemd[1]: Started cri-containerd-2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea.scope. Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2542 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:28.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356437633231623333333632323830333864333431316231383033 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit: BPF prog-id=133 op=LOAD Dec 13 13:56:28.780000 audit[2661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2542 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:28.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356437633231623333333632323830333864333431316231383033 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit: BPF prog-id=134 op=LOAD Dec 13 13:56:28.780000 audit[2661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2542 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:28.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356437633231623333333632323830333864333431316231383033 Dec 13 13:56:28.780000 audit: BPF prog-id=134 op=UNLOAD Dec 13 13:56:28.780000 audit: BPF prog-id=133 op=UNLOAD Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:28.780000 audit: BPF prog-id=135 op=LOAD Dec 13 13:56:28.780000 audit[2661]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2542 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:28.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356437633231623333333632323830333864333431316231383033 Dec 13 13:56:28.815915 env[1220]: time="2024-12-13T13:56:28.815838056Z" level=info msg="StartContainer for \"2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea\" returns successfully" Dec 13 13:56:28.818428 systemd[1]: cri-containerd-2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea.scope: Deactivated successfully. Dec 13 13:56:28.823000 audit: BPF prog-id=135 op=UNLOAD Dec 13 13:56:28.881272 env[1220]: time="2024-12-13T13:56:28.881224505Z" level=info msg="shim disconnected" id=2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea Dec 13 13:56:28.881272 env[1220]: time="2024-12-13T13:56:28.881272350Z" level=warning msg="cleaning up after shim disconnected" id=2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea namespace=k8s.io Dec 13 13:56:28.881513 env[1220]: time="2024-12-13T13:56:28.881284031Z" level=info msg="cleaning up dead shim" Dec 13 13:56:28.888016 env[1220]: time="2024-12-13T13:56:28.887981782Z" level=warning msg="cleanup warnings time=\"2024-12-13T13:56:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2699 runtime=io.containerd.runc.v2\n" Dec 13 13:56:29.014437 kubelet[2068]: E1213 13:56:29.013572 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nk6d6" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" Dec 13 13:56:29.074142 kubelet[2068]: I1213 13:56:29.074112 2068 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Dec 13 13:56:29.082482 kubelet[2068]: E1213 13:56:29.074670 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:29.082482 kubelet[2068]: E1213 13:56:29.075242 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:29.082637 env[1220]: time="2024-12-13T13:56:29.075592084Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\"" Dec 13 13:56:29.502241 systemd[1]: run-containerd-runc-k8s.io-2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea-runc.8GrjaP.mount: Deactivated successfully. Dec 13 13:56:29.502611 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2a5d7c21b3336228038d3411b180365ee1d64a3d952d0448b7ab840cbdea78ea-rootfs.mount: Deactivated successfully. Dec 13 13:56:30.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.14:22-10.0.0.1:35880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:30.793733 systemd[1]: Started sshd@7-10.0.0.14:22-10.0.0.1:35880.service. Dec 13 13:56:30.795180 kernel: kauditd_printk_skb: 223 callbacks suppressed Dec 13 13:56:30.795256 kernel: audit: type=1130 audit(1734098190.792:1008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.14:22-10.0.0.1:35880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:30.971000 audit[2719]: USER_ACCT pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:30.973535 sshd[2719]: Accepted publickey for core from 10.0.0.1 port 35880 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:30.975247 sshd[2719]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:30.973000 audit[2719]: CRED_ACQ pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:30.979730 kernel: audit: type=1101 audit(1734098190.971:1009): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:30.979822 kernel: audit: type=1103 audit(1734098190.973:1010): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:30.979858 kernel: audit: type=1006 audit(1734098190.973:1011): pid=2719 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Dec 13 13:56:30.973000 audit[2719]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc96a9e60 a2=3 a3=1 items=0 ppid=1 pid=2719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:30.985199 kernel: audit: type=1300 audit(1734098190.973:1011): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc96a9e60 a2=3 a3=1 items=0 ppid=1 pid=2719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:30.985280 kernel: audit: type=1327 audit(1734098190.973:1011): proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:30.973000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:30.984722 systemd-logind[1209]: New session 8 of user core. Dec 13 13:56:30.985159 systemd[1]: Started session-8.scope. Dec 13 13:56:30.988000 audit[2719]: USER_START pid=2719 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:30.989000 audit[2721]: CRED_ACQ pid=2721 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:30.996049 kernel: audit: type=1105 audit(1734098190.988:1012): pid=2719 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:30.996104 kernel: audit: type=1103 audit(1734098190.989:1013): pid=2721 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:31.013708 kubelet[2068]: E1213 13:56:31.013663 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nk6d6" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" Dec 13 13:56:31.113353 sshd[2719]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:31.114000 audit[2719]: USER_END pid=2719 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:31.118100 systemd[1]: sshd@7-10.0.0.14:22-10.0.0.1:35880.service: Deactivated successfully. Dec 13 13:56:31.118831 systemd[1]: session-8.scope: Deactivated successfully. Dec 13 13:56:31.115000 audit[2719]: CRED_DISP pid=2719 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:31.122848 kernel: audit: type=1106 audit(1734098191.114:1014): pid=2719 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:31.122909 kernel: audit: type=1104 audit(1734098191.115:1015): pid=2719 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:31.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.14:22-10.0.0.1:35880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:31.123387 systemd-logind[1209]: Session 8 logged out. Waiting for processes to exit. Dec 13 13:56:31.124032 systemd-logind[1209]: Removed session 8. Dec 13 13:56:31.488194 kubelet[2068]: I1213 13:56:31.488164 2068 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Dec 13 13:56:31.489381 kubelet[2068]: E1213 13:56:31.489334 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:31.510000 audit[2733]: NETFILTER_CFG table=filter:95 family=2 entries=17 op=nft_register_rule pid=2733 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:31.510000 audit[2733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff7ee3d80 a2=0 a3=1 items=0 ppid=2264 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:31.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:31.514000 audit[2733]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2733 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:31.514000 audit[2733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff7ee3d80 a2=0 a3=1 items=0 ppid=2264 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:31.514000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:32.079966 kubelet[2068]: E1213 13:56:32.079934 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:32.560606 env[1220]: time="2024-12-13T13:56:32.560389823Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:32.562212 env[1220]: time="2024-12-13T13:56:32.562179838Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e5ca62af4ff61b88f55fe4e0d7723151103d3f6a470fd4ebb311a2de27a9597f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:32.564673 env[1220]: time="2024-12-13T13:56:32.564638505Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:32.565754 env[1220]: time="2024-12-13T13:56:32.565727548Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21e759d51c90dfb34fc1397dc180dd3a3fb564c2b0580d2f61ffe108f2a3c94b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:32.566908 env[1220]: time="2024-12-13T13:56:32.566867354Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\" returns image reference \"sha256:e5ca62af4ff61b88f55fe4e0d7723151103d3f6a470fd4ebb311a2de27a9597f\"" Dec 13 13:56:32.574446 env[1220]: time="2024-12-13T13:56:32.573701153Z" level=info msg="CreateContainer within sandbox \"45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Dec 13 13:56:32.584287 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1652711273.mount: Deactivated successfully. Dec 13 13:56:32.590482 env[1220]: time="2024-12-13T13:56:32.590426302Z" level=info msg="CreateContainer within sandbox \"45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac\"" Dec 13 13:56:32.590912 env[1220]: time="2024-12-13T13:56:32.590885457Z" level=info msg="StartContainer for \"24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac\"" Dec 13 13:56:32.613389 systemd[1]: Started cri-containerd-24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac.scope. Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2542 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:32.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303530636366393662343532646236353365326635613432636632 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit: BPF prog-id=136 op=LOAD Dec 13 13:56:32.650000 audit[2742]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2542 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:32.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303530636366393662343532646236353365326635613432636632 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit: BPF prog-id=137 op=LOAD Dec 13 13:56:32.650000 audit[2742]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2542 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:32.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303530636366393662343532646236353365326635613432636632 Dec 13 13:56:32.650000 audit: BPF prog-id=137 op=UNLOAD Dec 13 13:56:32.650000 audit: BPF prog-id=136 op=UNLOAD Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:32.650000 audit: BPF prog-id=138 op=LOAD Dec 13 13:56:32.650000 audit[2742]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2542 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:32.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234303530636366393662343532646236353365326635613432636632 Dec 13 13:56:32.662870 env[1220]: time="2024-12-13T13:56:32.662820597Z" level=info msg="StartContainer for \"24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac\" returns successfully" Dec 13 13:56:33.013135 kubelet[2068]: E1213 13:56:33.013070 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nk6d6" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" Dec 13 13:56:33.083467 kubelet[2068]: E1213 13:56:33.083406 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:33.262549 env[1220]: time="2024-12-13T13:56:33.262479225Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Dec 13 13:56:33.265176 systemd[1]: cri-containerd-24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac.scope: Deactivated successfully. Dec 13 13:56:33.270000 audit: BPF prog-id=138 op=UNLOAD Dec 13 13:56:33.335950 kubelet[2068]: I1213 13:56:33.335901 2068 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Dec 13 13:56:33.343544 env[1220]: time="2024-12-13T13:56:33.343499122Z" level=info msg="shim disconnected" id=24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac Dec 13 13:56:33.343760 env[1220]: time="2024-12-13T13:56:33.343741980Z" level=warning msg="cleaning up after shim disconnected" id=24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac namespace=k8s.io Dec 13 13:56:33.343830 env[1220]: time="2024-12-13T13:56:33.343816385Z" level=info msg="cleaning up dead shim" Dec 13 13:56:33.361437 kubelet[2068]: I1213 13:56:33.360902 2068 topology_manager.go:215] "Topology Admit Handler" podUID="c5db530d-1da7-4678-a568-be34cbdec141" podNamespace="kube-system" podName="coredns-7db6d8ff4d-dxkkw" Dec 13 13:56:33.363915 env[1220]: time="2024-12-13T13:56:33.363810691Z" level=warning msg="cleanup warnings time=\"2024-12-13T13:56:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2781 runtime=io.containerd.runc.v2\n" Dec 13 13:56:33.367620 kubelet[2068]: I1213 13:56:33.366773 2068 topology_manager.go:215] "Topology Admit Handler" podUID="52ebe7ce-d5af-4651-afd2-0f235a5e223f" podNamespace="calico-apiserver" podName="calico-apiserver-76d586d7df-89t4v" Dec 13 13:56:33.367620 kubelet[2068]: I1213 13:56:33.366933 2068 topology_manager.go:215] "Topology Admit Handler" podUID="d7c8a806-427f-4e3e-ba41-2613240195fa" podNamespace="calico-system" podName="calico-kube-controllers-68f8464d77-4k4gb" Dec 13 13:56:33.367620 kubelet[2068]: I1213 13:56:33.367028 2068 topology_manager.go:215] "Topology Admit Handler" podUID="59cb5242-a560-4729-b88e-546b5ca59812" podNamespace="kube-system" podName="coredns-7db6d8ff4d-9g529" Dec 13 13:56:33.367620 kubelet[2068]: I1213 13:56:33.367164 2068 topology_manager.go:215] "Topology Admit Handler" podUID="1403eb84-919f-4a7b-b1bb-3b5e0678848f" podNamespace="calico-apiserver" podName="calico-apiserver-76d586d7df-w7lzs" Dec 13 13:56:33.370654 systemd[1]: Created slice kubepods-burstable-podc5db530d_1da7_4678_a568_be34cbdec141.slice. Dec 13 13:56:33.375231 systemd[1]: Created slice kubepods-burstable-pod59cb5242_a560_4729_b88e_546b5ca59812.slice. Dec 13 13:56:33.381318 systemd[1]: Created slice kubepods-besteffort-pod52ebe7ce_d5af_4651_afd2_0f235a5e223f.slice. Dec 13 13:56:33.384487 systemd[1]: Created slice kubepods-besteffort-pod1403eb84_919f_4a7b_b1bb_3b5e0678848f.slice. Dec 13 13:56:33.389417 systemd[1]: Created slice kubepods-besteffort-podd7c8a806_427f_4e3e_ba41_2613240195fa.slice. Dec 13 13:56:33.427087 kubelet[2068]: I1213 13:56:33.427034 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-twqtw\" (UniqueName: \"kubernetes.io/projected/1403eb84-919f-4a7b-b1bb-3b5e0678848f-kube-api-access-twqtw\") pod \"calico-apiserver-76d586d7df-w7lzs\" (UID: \"1403eb84-919f-4a7b-b1bb-3b5e0678848f\") " pod="calico-apiserver/calico-apiserver-76d586d7df-w7lzs" Dec 13 13:56:33.427087 kubelet[2068]: I1213 13:56:33.427084 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6ncwd\" (UniqueName: \"kubernetes.io/projected/c5db530d-1da7-4678-a568-be34cbdec141-kube-api-access-6ncwd\") pod \"coredns-7db6d8ff4d-dxkkw\" (UID: \"c5db530d-1da7-4678-a568-be34cbdec141\") " pod="kube-system/coredns-7db6d8ff4d-dxkkw" Dec 13 13:56:33.427283 kubelet[2068]: I1213 13:56:33.427111 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cjpgd\" (UniqueName: \"kubernetes.io/projected/59cb5242-a560-4729-b88e-546b5ca59812-kube-api-access-cjpgd\") pod \"coredns-7db6d8ff4d-9g529\" (UID: \"59cb5242-a560-4729-b88e-546b5ca59812\") " pod="kube-system/coredns-7db6d8ff4d-9g529" Dec 13 13:56:33.427283 kubelet[2068]: I1213 13:56:33.427129 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/52ebe7ce-d5af-4651-afd2-0f235a5e223f-calico-apiserver-certs\") pod \"calico-apiserver-76d586d7df-89t4v\" (UID: \"52ebe7ce-d5af-4651-afd2-0f235a5e223f\") " pod="calico-apiserver/calico-apiserver-76d586d7df-89t4v" Dec 13 13:56:33.427283 kubelet[2068]: I1213 13:56:33.427158 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8fh56\" (UniqueName: \"kubernetes.io/projected/52ebe7ce-d5af-4651-afd2-0f235a5e223f-kube-api-access-8fh56\") pod \"calico-apiserver-76d586d7df-89t4v\" (UID: \"52ebe7ce-d5af-4651-afd2-0f235a5e223f\") " pod="calico-apiserver/calico-apiserver-76d586d7df-89t4v" Dec 13 13:56:33.427283 kubelet[2068]: I1213 13:56:33.427205 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/c5db530d-1da7-4678-a568-be34cbdec141-config-volume\") pod \"coredns-7db6d8ff4d-dxkkw\" (UID: \"c5db530d-1da7-4678-a568-be34cbdec141\") " pod="kube-system/coredns-7db6d8ff4d-dxkkw" Dec 13 13:56:33.427283 kubelet[2068]: I1213 13:56:33.427241 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d7c8a806-427f-4e3e-ba41-2613240195fa-tigera-ca-bundle\") pod \"calico-kube-controllers-68f8464d77-4k4gb\" (UID: \"d7c8a806-427f-4e3e-ba41-2613240195fa\") " pod="calico-system/calico-kube-controllers-68f8464d77-4k4gb" Dec 13 13:56:33.427435 kubelet[2068]: I1213 13:56:33.427268 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1403eb84-919f-4a7b-b1bb-3b5e0678848f-calico-apiserver-certs\") pod \"calico-apiserver-76d586d7df-w7lzs\" (UID: \"1403eb84-919f-4a7b-b1bb-3b5e0678848f\") " pod="calico-apiserver/calico-apiserver-76d586d7df-w7lzs" Dec 13 13:56:33.427435 kubelet[2068]: I1213 13:56:33.427287 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/59cb5242-a560-4729-b88e-546b5ca59812-config-volume\") pod \"coredns-7db6d8ff4d-9g529\" (UID: \"59cb5242-a560-4729-b88e-546b5ca59812\") " pod="kube-system/coredns-7db6d8ff4d-9g529" Dec 13 13:56:33.427435 kubelet[2068]: I1213 13:56:33.427304 2068 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nvk9w\" (UniqueName: \"kubernetes.io/projected/d7c8a806-427f-4e3e-ba41-2613240195fa-kube-api-access-nvk9w\") pod \"calico-kube-controllers-68f8464d77-4k4gb\" (UID: \"d7c8a806-427f-4e3e-ba41-2613240195fa\") " pod="calico-system/calico-kube-controllers-68f8464d77-4k4gb" Dec 13 13:56:33.587098 systemd[1]: run-containerd-runc-k8s.io-24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac-runc.g4K5zu.mount: Deactivated successfully. Dec 13 13:56:33.587200 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-24050ccf96b452db653e2f5a42cf2dd19f353ab9719ef33a983789eb1cad8bac-rootfs.mount: Deactivated successfully. Dec 13 13:56:33.673764 kubelet[2068]: E1213 13:56:33.673717 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:33.674927 env[1220]: time="2024-12-13T13:56:33.674540222Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-dxkkw,Uid:c5db530d-1da7-4678-a568-be34cbdec141,Namespace:kube-system,Attempt:0,}" Dec 13 13:56:33.679071 kubelet[2068]: E1213 13:56:33.678233 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:33.679174 env[1220]: time="2024-12-13T13:56:33.678743330Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-9g529,Uid:59cb5242-a560-4729-b88e-546b5ca59812,Namespace:kube-system,Attempt:0,}" Dec 13 13:56:33.684067 env[1220]: time="2024-12-13T13:56:33.684027397Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-89t4v,Uid:52ebe7ce-d5af-4651-afd2-0f235a5e223f,Namespace:calico-apiserver,Attempt:0,}" Dec 13 13:56:33.687293 env[1220]: time="2024-12-13T13:56:33.687245673Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-w7lzs,Uid:1403eb84-919f-4a7b-b1bb-3b5e0678848f,Namespace:calico-apiserver,Attempt:0,}" Dec 13 13:56:33.692809 env[1220]: time="2024-12-13T13:56:33.692773558Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68f8464d77-4k4gb,Uid:d7c8a806-427f-4e3e-ba41-2613240195fa,Namespace:calico-system,Attempt:0,}" Dec 13 13:56:34.043759 env[1220]: time="2024-12-13T13:56:34.043687407Z" level=error msg="Failed to destroy network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.044100 env[1220]: time="2024-12-13T13:56:34.044067434Z" level=error msg="encountered an error cleaning up failed sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.044146 env[1220]: time="2024-12-13T13:56:34.044123758Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-w7lzs,Uid:1403eb84-919f-4a7b-b1bb-3b5e0678848f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.045242 kubelet[2068]: E1213 13:56:34.045187 2068 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.045391 kubelet[2068]: E1213 13:56:34.045276 2068 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-76d586d7df-w7lzs" Dec 13 13:56:34.045391 kubelet[2068]: E1213 13:56:34.045298 2068 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-76d586d7df-w7lzs" Dec 13 13:56:34.047447 kubelet[2068]: E1213 13:56:34.047396 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-76d586d7df-w7lzs_calico-apiserver(1403eb84-919f-4a7b-b1bb-3b5e0678848f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-76d586d7df-w7lzs_calico-apiserver(1403eb84-919f-4a7b-b1bb-3b5e0678848f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-76d586d7df-w7lzs" podUID="1403eb84-919f-4a7b-b1bb-3b5e0678848f" Dec 13 13:56:34.054797 env[1220]: time="2024-12-13T13:56:34.054744510Z" level=error msg="Failed to destroy network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.055297 env[1220]: time="2024-12-13T13:56:34.055261027Z" level=error msg="encountered an error cleaning up failed sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.055475 env[1220]: time="2024-12-13T13:56:34.055436880Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-9g529,Uid:59cb5242-a560-4729-b88e-546b5ca59812,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.055788 kubelet[2068]: E1213 13:56:34.055745 2068 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.055842 kubelet[2068]: E1213 13:56:34.055809 2068 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-9g529" Dec 13 13:56:34.055842 kubelet[2068]: E1213 13:56:34.055828 2068 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-9g529" Dec 13 13:56:34.055900 kubelet[2068]: E1213 13:56:34.055870 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-9g529_kube-system(59cb5242-a560-4729-b88e-546b5ca59812)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-9g529_kube-system(59cb5242-a560-4729-b88e-546b5ca59812)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-9g529" podUID="59cb5242-a560-4729-b88e-546b5ca59812" Dec 13 13:56:34.062335 env[1220]: time="2024-12-13T13:56:34.062291245Z" level=error msg="Failed to destroy network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.062653 env[1220]: time="2024-12-13T13:56:34.062618068Z" level=error msg="encountered an error cleaning up failed sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.062702 env[1220]: time="2024-12-13T13:56:34.062666432Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68f8464d77-4k4gb,Uid:d7c8a806-427f-4e3e-ba41-2613240195fa,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.062877 kubelet[2068]: E1213 13:56:34.062844 2068 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.062936 kubelet[2068]: E1213 13:56:34.062892 2068 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-68f8464d77-4k4gb" Dec 13 13:56:34.062936 kubelet[2068]: E1213 13:56:34.062913 2068 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-68f8464d77-4k4gb" Dec 13 13:56:34.062987 kubelet[2068]: E1213 13:56:34.062955 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-68f8464d77-4k4gb_calico-system(d7c8a806-427f-4e3e-ba41-2613240195fa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-68f8464d77-4k4gb_calico-system(d7c8a806-427f-4e3e-ba41-2613240195fa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-68f8464d77-4k4gb" podUID="d7c8a806-427f-4e3e-ba41-2613240195fa" Dec 13 13:56:34.067706 env[1220]: time="2024-12-13T13:56:34.067662145Z" level=error msg="Failed to destroy network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.068033 env[1220]: time="2024-12-13T13:56:34.068001729Z" level=error msg="encountered an error cleaning up failed sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.068080 env[1220]: time="2024-12-13T13:56:34.068053173Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-89t4v,Uid:52ebe7ce-d5af-4651-afd2-0f235a5e223f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.068243 kubelet[2068]: E1213 13:56:34.068216 2068 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.068297 kubelet[2068]: E1213 13:56:34.068259 2068 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-76d586d7df-89t4v" Dec 13 13:56:34.068297 kubelet[2068]: E1213 13:56:34.068275 2068 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-76d586d7df-89t4v" Dec 13 13:56:34.068369 kubelet[2068]: E1213 13:56:34.068310 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-76d586d7df-89t4v_calico-apiserver(52ebe7ce-d5af-4651-afd2-0f235a5e223f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-76d586d7df-89t4v_calico-apiserver(52ebe7ce-d5af-4651-afd2-0f235a5e223f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-76d586d7df-89t4v" podUID="52ebe7ce-d5af-4651-afd2-0f235a5e223f" Dec 13 13:56:34.068550 env[1220]: time="2024-12-13T13:56:34.068493124Z" level=error msg="Failed to destroy network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.068844 env[1220]: time="2024-12-13T13:56:34.068815067Z" level=error msg="encountered an error cleaning up failed sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.068882 env[1220]: time="2024-12-13T13:56:34.068863871Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-dxkkw,Uid:c5db530d-1da7-4678-a568-be34cbdec141,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.069503 kubelet[2068]: E1213 13:56:34.069472 2068 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.069551 kubelet[2068]: E1213 13:56:34.069516 2068 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-dxkkw" Dec 13 13:56:34.069551 kubelet[2068]: E1213 13:56:34.069534 2068 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-dxkkw" Dec 13 13:56:34.069599 kubelet[2068]: E1213 13:56:34.069562 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-dxkkw_kube-system(c5db530d-1da7-4678-a568-be34cbdec141)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-dxkkw_kube-system(c5db530d-1da7-4678-a568-be34cbdec141)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-dxkkw" podUID="c5db530d-1da7-4678-a568-be34cbdec141" Dec 13 13:56:34.086314 kubelet[2068]: I1213 13:56:34.085803 2068 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:56:34.086713 env[1220]: time="2024-12-13T13:56:34.086641250Z" level=info msg="StopPodSandbox for \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\"" Dec 13 13:56:34.087307 kubelet[2068]: I1213 13:56:34.087271 2068 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:56:34.087998 env[1220]: time="2024-12-13T13:56:34.087921340Z" level=info msg="StopPodSandbox for \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\"" Dec 13 13:56:34.088674 kubelet[2068]: I1213 13:56:34.088651 2068 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:56:34.089121 env[1220]: time="2024-12-13T13:56:34.089086143Z" level=info msg="StopPodSandbox for \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\"" Dec 13 13:56:34.091510 kubelet[2068]: E1213 13:56:34.091467 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:34.094045 env[1220]: time="2024-12-13T13:56:34.093845960Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\"" Dec 13 13:56:34.095940 kubelet[2068]: I1213 13:56:34.095904 2068 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:56:34.096693 env[1220]: time="2024-12-13T13:56:34.096657319Z" level=info msg="StopPodSandbox for \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\"" Dec 13 13:56:34.098291 kubelet[2068]: I1213 13:56:34.098236 2068 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:56:34.099120 env[1220]: time="2024-12-13T13:56:34.098734146Z" level=info msg="StopPodSandbox for \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\"" Dec 13 13:56:34.131958 env[1220]: time="2024-12-13T13:56:34.131898655Z" level=error msg="StopPodSandbox for \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\" failed" error="failed to destroy network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.132416 kubelet[2068]: E1213 13:56:34.132362 2068 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:56:34.132497 kubelet[2068]: E1213 13:56:34.132435 2068 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8"} Dec 13 13:56:34.132543 kubelet[2068]: E1213 13:56:34.132500 2068 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"52ebe7ce-d5af-4651-afd2-0f235a5e223f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 13:56:34.132543 kubelet[2068]: E1213 13:56:34.132521 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"52ebe7ce-d5af-4651-afd2-0f235a5e223f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-76d586d7df-89t4v" podUID="52ebe7ce-d5af-4651-afd2-0f235a5e223f" Dec 13 13:56:34.140608 env[1220]: time="2024-12-13T13:56:34.140552708Z" level=error msg="StopPodSandbox for \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\" failed" error="failed to destroy network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.140818 kubelet[2068]: E1213 13:56:34.140771 2068 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:56:34.140871 kubelet[2068]: E1213 13:56:34.140827 2068 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a"} Dec 13 13:56:34.140871 kubelet[2068]: E1213 13:56:34.140860 2068 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c5db530d-1da7-4678-a568-be34cbdec141\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 13:56:34.140943 kubelet[2068]: E1213 13:56:34.140902 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c5db530d-1da7-4678-a568-be34cbdec141\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-dxkkw" podUID="c5db530d-1da7-4678-a568-be34cbdec141" Dec 13 13:56:34.141900 env[1220]: time="2024-12-13T13:56:34.141829199Z" level=error msg="StopPodSandbox for \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\" failed" error="failed to destroy network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.142143 kubelet[2068]: E1213 13:56:34.142111 2068 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:56:34.142223 kubelet[2068]: E1213 13:56:34.142148 2068 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4"} Dec 13 13:56:34.142223 kubelet[2068]: E1213 13:56:34.142171 2068 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"59cb5242-a560-4729-b88e-546b5ca59812\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 13:56:34.142223 kubelet[2068]: E1213 13:56:34.142198 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"59cb5242-a560-4729-b88e-546b5ca59812\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-9g529" podUID="59cb5242-a560-4729-b88e-546b5ca59812" Dec 13 13:56:34.148512 env[1220]: time="2024-12-13T13:56:34.148460388Z" level=error msg="StopPodSandbox for \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\" failed" error="failed to destroy network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.148821 kubelet[2068]: E1213 13:56:34.148701 2068 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:56:34.148821 kubelet[2068]: E1213 13:56:34.148741 2068 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf"} Dec 13 13:56:34.148821 kubelet[2068]: E1213 13:56:34.148771 2068 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1403eb84-919f-4a7b-b1bb-3b5e0678848f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 13:56:34.148821 kubelet[2068]: E1213 13:56:34.148789 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1403eb84-919f-4a7b-b1bb-3b5e0678848f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-76d586d7df-w7lzs" podUID="1403eb84-919f-4a7b-b1bb-3b5e0678848f" Dec 13 13:56:34.156906 env[1220]: time="2024-12-13T13:56:34.156842302Z" level=error msg="StopPodSandbox for \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\" failed" error="failed to destroy network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:34.157212 kubelet[2068]: E1213 13:56:34.157065 2068 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:56:34.157212 kubelet[2068]: E1213 13:56:34.157115 2068 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d"} Dec 13 13:56:34.157212 kubelet[2068]: E1213 13:56:34.157156 2068 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d7c8a806-427f-4e3e-ba41-2613240195fa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 13:56:34.157212 kubelet[2068]: E1213 13:56:34.157176 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d7c8a806-427f-4e3e-ba41-2613240195fa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-68f8464d77-4k4gb" podUID="d7c8a806-427f-4e3e-ba41-2613240195fa" Dec 13 13:56:34.586696 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4-shm.mount: Deactivated successfully. Dec 13 13:56:34.586779 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a-shm.mount: Deactivated successfully. Dec 13 13:56:35.017161 systemd[1]: Created slice kubepods-besteffort-pod9baa3386_bb08_4023_b9a1_0a8007c16bf7.slice. Dec 13 13:56:35.019255 env[1220]: time="2024-12-13T13:56:35.019203459Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nk6d6,Uid:9baa3386-bb08-4023-b9a1-0a8007c16bf7,Namespace:calico-system,Attempt:0,}" Dec 13 13:56:35.106201 env[1220]: time="2024-12-13T13:56:35.106147897Z" level=error msg="Failed to destroy network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:35.106784 env[1220]: time="2024-12-13T13:56:35.106745378Z" level=error msg="encountered an error cleaning up failed sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:35.106952 env[1220]: time="2024-12-13T13:56:35.106900988Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nk6d6,Uid:9baa3386-bb08-4023-b9a1-0a8007c16bf7,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:35.107547 kubelet[2068]: E1213 13:56:35.107183 2068 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:35.107547 kubelet[2068]: E1213 13:56:35.107238 2068 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-nk6d6" Dec 13 13:56:35.107547 kubelet[2068]: E1213 13:56:35.107266 2068 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-nk6d6" Dec 13 13:56:35.107857 kubelet[2068]: E1213 13:56:35.107305 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-nk6d6_calico-system(9baa3386-bb08-4023-b9a1-0a8007c16bf7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-nk6d6_calico-system(9baa3386-bb08-4023-b9a1-0a8007c16bf7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-nk6d6" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" Dec 13 13:56:35.108287 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00-shm.mount: Deactivated successfully. Dec 13 13:56:36.107477 kubelet[2068]: I1213 13:56:36.106383 2068 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:56:36.107644 env[1220]: time="2024-12-13T13:56:36.107549930Z" level=info msg="StopPodSandbox for \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\"" Dec 13 13:56:36.121774 systemd[1]: Started sshd@8-10.0.0.14:22-10.0.0.1:48890.service. Dec 13 13:56:36.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.14:22-10.0.0.1:48890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:36.122794 kernel: kauditd_printk_skb: 51 callbacks suppressed Dec 13 13:56:36.122840 kernel: audit: type=1130 audit(1734098196.121:1026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.14:22-10.0.0.1:48890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:36.146727 env[1220]: time="2024-12-13T13:56:36.146657286Z" level=error msg="StopPodSandbox for \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\" failed" error="failed to destroy network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Dec 13 13:56:36.146971 kubelet[2068]: E1213 13:56:36.146936 2068 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:56:36.147213 kubelet[2068]: E1213 13:56:36.146995 2068 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00"} Dec 13 13:56:36.147213 kubelet[2068]: E1213 13:56:36.147035 2068 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9baa3386-bb08-4023-b9a1-0a8007c16bf7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Dec 13 13:56:36.147213 kubelet[2068]: E1213 13:56:36.147068 2068 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9baa3386-bb08-4023-b9a1-0a8007c16bf7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-nk6d6" podUID="9baa3386-bb08-4023-b9a1-0a8007c16bf7" Dec 13 13:56:36.172000 audit[3163]: USER_ACCT pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.173347 sshd[3163]: Accepted publickey for core from 10.0.0.1 port 48890 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:36.179650 sshd[3163]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:36.176000 audit[3163]: CRED_ACQ pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.185435 systemd-logind[1209]: New session 9 of user core. Dec 13 13:56:36.186494 systemd[1]: Started session-9.scope. Dec 13 13:56:36.186694 kernel: audit: type=1101 audit(1734098196.172:1027): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.186734 kernel: audit: type=1103 audit(1734098196.176:1028): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.186762 kernel: audit: type=1006 audit(1734098196.176:1029): pid=3163 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Dec 13 13:56:36.176000 audit[3163]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6c6d6e0 a2=3 a3=1 items=0 ppid=1 pid=3163 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:36.192067 kernel: audit: type=1300 audit(1734098196.176:1029): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6c6d6e0 a2=3 a3=1 items=0 ppid=1 pid=3163 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:36.192148 kernel: audit: type=1327 audit(1734098196.176:1029): proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:36.176000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:36.190000 audit[3163]: USER_START pid=3163 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.197389 kernel: audit: type=1105 audit(1734098196.190:1030): pid=3163 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.197464 kernel: audit: type=1103 audit(1734098196.192:1031): pid=3172 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.192000 audit[3172]: CRED_ACQ pid=3172 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.330040 sshd[3163]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:36.330000 audit[3163]: USER_END pid=3163 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.333021 systemd[1]: session-9.scope: Deactivated successfully. Dec 13 13:56:36.333684 systemd-logind[1209]: Session 9 logged out. Waiting for processes to exit. Dec 13 13:56:36.333798 systemd[1]: sshd@8-10.0.0.14:22-10.0.0.1:48890.service: Deactivated successfully. Dec 13 13:56:36.334787 systemd-logind[1209]: Removed session 9. Dec 13 13:56:36.330000 audit[3163]: CRED_DISP pid=3163 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.338145 kernel: audit: type=1106 audit(1734098196.330:1032): pid=3163 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.338237 kernel: audit: type=1104 audit(1734098196.330:1033): pid=3163 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:36.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.14:22-10.0.0.1:48890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:39.276709 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3639101595.mount: Deactivated successfully. Dec 13 13:56:39.601019 env[1220]: time="2024-12-13T13:56:39.600886754Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:39.603974 env[1220]: time="2024-12-13T13:56:39.603938859Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:680b8c280812d12c035ca9f0deedea7c761afe0f1cc65109ea2f96bf63801758,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:39.606132 env[1220]: time="2024-12-13T13:56:39.606087149Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:39.609376 env[1220]: time="2024-12-13T13:56:39.607463673Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:99c3917516efe1f807a0cfdf2d14b628b7c5cc6bd8a9ee5a253154f31756bea1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:39.609376 env[1220]: time="2024-12-13T13:56:39.607978664Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\" returns image reference \"sha256:680b8c280812d12c035ca9f0deedea7c761afe0f1cc65109ea2f96bf63801758\"" Dec 13 13:56:39.636409 env[1220]: time="2024-12-13T13:56:39.636368427Z" level=info msg="CreateContainer within sandbox \"45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Dec 13 13:56:39.734986 env[1220]: time="2024-12-13T13:56:39.734932648Z" level=info msg="CreateContainer within sandbox \"45156202a7136214163c4d6a62f902aec92ef0cef9e02b13ef00cff1d8b35374\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"5ae2a38c1f41e88d84ce1074dfb2994aaa672759f154423cddf9172db9a86f22\"" Dec 13 13:56:39.735472 env[1220]: time="2024-12-13T13:56:39.735447159Z" level=info msg="StartContainer for \"5ae2a38c1f41e88d84ce1074dfb2994aaa672759f154423cddf9172db9a86f22\"" Dec 13 13:56:39.761222 systemd[1]: Started cri-containerd-5ae2a38c1f41e88d84ce1074dfb2994aaa672759f154423cddf9172db9a86f22.scope. Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2542 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:39.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653261333863316634316538386438346365313037346466623239 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.818000 audit: BPF prog-id=139 op=LOAD Dec 13 13:56:39.818000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2542 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:39.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653261333863316634316538386438346365313037346466623239 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit: BPF prog-id=140 op=LOAD Dec 13 13:56:39.819000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2542 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:39.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653261333863316634316538386438346365313037346466623239 Dec 13 13:56:39.819000 audit: BPF prog-id=140 op=UNLOAD Dec 13 13:56:39.819000 audit: BPF prog-id=139 op=UNLOAD Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { perfmon } for pid=3194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit[3194]: AVC avc: denied { bpf } for pid=3194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:39.819000 audit: BPF prog-id=141 op=LOAD Dec 13 13:56:39.819000 audit[3194]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2542 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:39.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653261333863316634316538386438346365313037346466623239 Dec 13 13:56:39.872137 env[1220]: time="2024-12-13T13:56:39.872094010Z" level=info msg="StartContainer for \"5ae2a38c1f41e88d84ce1074dfb2994aaa672759f154423cddf9172db9a86f22\" returns successfully" Dec 13 13:56:40.034541 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Dec 13 13:56:40.034742 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Dec 13 13:56:40.127291 kubelet[2068]: E1213 13:56:40.127178 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:40.146325 kubelet[2068]: I1213 13:56:40.145651 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-9cchc" podStartSLOduration=1.096141744 podStartE2EDuration="15.145635288s" podCreationTimestamp="2024-12-13 13:56:25 +0000 UTC" firstStartedPulling="2024-12-13 13:56:25.559600108 +0000 UTC m=+23.628929619" lastFinishedPulling="2024-12-13 13:56:39.609093652 +0000 UTC m=+37.678423163" observedRunningTime="2024-12-13 13:56:40.144296329 +0000 UTC m=+38.213625840" watchObservedRunningTime="2024-12-13 13:56:40.145635288 +0000 UTC m=+38.214964759" Dec 13 13:56:41.127590 kubelet[2068]: E1213 13:56:41.127537 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:41.335297 systemd[1]: Started sshd@9-10.0.0.14:22-10.0.0.1:48894.service. Dec 13 13:56:41.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.14:22-10.0.0.1:48894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:41.339751 kernel: kauditd_printk_skb: 44 callbacks suppressed Dec 13 13:56:41.339848 kernel: audit: type=1130 audit(1734098201.334:1041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.14:22-10.0.0.1:48894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:41.377000 audit[3362]: AVC avc: denied { write } for pid=3362 comm="tee" name="fd" dev="proc" ino=19317 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.377000 audit[3362]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe4468a2a a2=241 a3=1b6 items=1 ppid=3312 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.387258 kernel: audit: type=1400 audit(1734098201.377:1042): avc: denied { write } for pid=3362 comm="tee" name="fd" dev="proc" ino=19317 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.387370 kernel: audit: type=1300 audit(1734098201.377:1042): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe4468a2a a2=241 a3=1b6 items=1 ppid=3312 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.387405 kernel: audit: type=1307 audit(1734098201.377:1042): cwd="/etc/service/enabled/confd/log" Dec 13 13:56:41.377000 audit: CWD cwd="/etc/service/enabled/confd/log" Dec 13 13:56:41.388324 kernel: audit: type=1302 audit(1734098201.377:1042): item=0 name="/dev/fd/63" inode=19943 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.377000 audit: PATH item=0 name="/dev/fd/63" inode=19943 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.389187 sshd[3300]: Accepted publickey for core from 10.0.0.1 port 48894 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:41.391098 kernel: audit: type=1327 audit(1734098201.377:1042): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.377000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.391171 sshd[3300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:41.387000 audit[3300]: USER_ACCT pid=3300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.398392 kernel: audit: type=1101 audit(1734098201.387:1043): pid=3300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.398467 kernel: audit: type=1103 audit(1734098201.389:1044): pid=3300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.389000 audit[3300]: CRED_ACQ pid=3300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.397945 systemd[1]: Started session-10.scope. Dec 13 13:56:41.398221 systemd-logind[1209]: New session 10 of user core. Dec 13 13:56:41.402114 kernel: audit: type=1006 audit(1734098201.389:1045): pid=3300 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Dec 13 13:56:41.402193 kernel: audit: type=1300 audit(1734098201.389:1045): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfaa6530 a2=3 a3=1 items=0 ppid=1 pid=3300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.389000 audit[3300]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfaa6530 a2=3 a3=1 items=0 ppid=1 pid=3300 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.389000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:41.401000 audit[3300]: USER_START pid=3300 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.403000 audit[3371]: CRED_ACQ pid=3371 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.405000 audit[3373]: AVC avc: denied { write } for pid=3373 comm="tee" name="fd" dev="proc" ino=17200 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.405000 audit[3373]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd9b96a1a a2=241 a3=1b6 items=1 ppid=3313 pid=3373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.405000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Dec 13 13:56:41.405000 audit: PATH item=0 name="/dev/fd/63" inode=19946 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.405000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.411000 audit[3381]: AVC avc: denied { write } for pid=3381 comm="tee" name="fd" dev="proc" ino=19329 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.411000 audit[3381]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff4b07a2c a2=241 a3=1b6 items=1 ppid=3317 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.411000 audit: CWD cwd="/etc/service/enabled/cni/log" Dec 13 13:56:41.411000 audit: PATH item=0 name="/dev/fd/63" inode=18198 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.411000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.426000 audit[3378]: AVC avc: denied { write } for pid=3378 comm="tee" name="fd" dev="proc" ino=19952 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.426000 audit[3378]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff64b3a2b a2=241 a3=1b6 items=1 ppid=3318 pid=3378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.426000 audit: CWD cwd="/etc/service/enabled/bird/log" Dec 13 13:56:41.426000 audit: PATH item=0 name="/dev/fd/63" inode=17202 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.426000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.427000 audit[3387]: AVC avc: denied { write } for pid=3387 comm="tee" name="fd" dev="proc" ino=18201 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.427000 audit[3387]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc407ba2a a2=241 a3=1b6 items=1 ppid=3309 pid=3387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.427000 audit: CWD cwd="/etc/service/enabled/felix/log" Dec 13 13:56:41.427000 audit: PATH item=0 name="/dev/fd/63" inode=19333 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.427000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.434000 audit[3384]: AVC avc: denied { write } for pid=3384 comm="tee" name="fd" dev="proc" ino=19338 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.434000 audit[3384]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff28b7a2a a2=241 a3=1b6 items=1 ppid=3328 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.434000 audit: CWD cwd="/etc/service/enabled/bird6/log" Dec 13 13:56:41.434000 audit: PATH item=0 name="/dev/fd/63" inode=19949 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.434000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.450000 audit[3392]: AVC avc: denied { write } for pid=3392 comm="tee" name="fd" dev="proc" ino=19970 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Dec 13 13:56:41.450000 audit[3392]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffff34ca1b a2=241 a3=1b6 items=1 ppid=3321 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.450000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Dec 13 13:56:41.450000 audit: PATH item=0 name="/dev/fd/63" inode=19344 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Dec 13 13:56:41.450000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Dec 13 13:56:41.587923 sshd[3300]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:41.589000 audit[3300]: USER_END pid=3300 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.589000 audit[3300]: CRED_DISP pid=3300 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.591862 systemd[1]: Started sshd@10-10.0.0.14:22-10.0.0.1:48906.service. Dec 13 13:56:41.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.14:22-10.0.0.1:48906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:41.592332 systemd[1]: sshd@9-10.0.0.14:22-10.0.0.1:48894.service: Deactivated successfully. Dec 13 13:56:41.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.14:22-10.0.0.1:48894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:41.594507 systemd-logind[1209]: Session 10 logged out. Waiting for processes to exit. Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.594000 audit: BPF prog-id=142 op=LOAD Dec 13 13:56:41.594000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffefc4efc8 a2=98 a3=ffffefc4efb8 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.594000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.594000 audit: BPF prog-id=142 op=UNLOAD Dec 13 13:56:41.596577 systemd[1]: session-10.scope: Deactivated successfully. Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.595000 audit: BPF prog-id=143 op=LOAD Dec 13 13:56:41.595000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffefc4ec58 a2=74 a3=95 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.597329 systemd-logind[1209]: Removed session 10. Dec 13 13:56:41.595000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.596000 audit: BPF prog-id=143 op=UNLOAD Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.596000 audit: BPF prog-id=144 op=LOAD Dec 13 13:56:41.596000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffefc4ecb8 a2=94 a3=2 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.596000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.596000 audit: BPF prog-id=144 op=UNLOAD Dec 13 13:56:41.632000 audit[3437]: USER_ACCT pid=3437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.633927 sshd[3437]: Accepted publickey for core from 10.0.0.1 port 48906 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:41.636000 audit[3437]: CRED_ACQ pid=3437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.637000 audit[3437]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde74fd70 a2=3 a3=1 items=0 ppid=1 pid=3437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.637000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:41.638731 sshd[3437]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:41.643126 systemd[1]: Started session-11.scope. Dec 13 13:56:41.643473 systemd-logind[1209]: New session 11 of user core. Dec 13 13:56:41.645000 audit[3437]: USER_START pid=3437 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.646000 audit[3444]: CRED_ACQ pid=3444 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit: BPF prog-id=145 op=LOAD Dec 13 13:56:41.682000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffefc4ec78 a2=40 a3=ffffefc4eca8 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.682000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.682000 audit: BPF prog-id=145 op=UNLOAD Dec 13 13:56:41.682000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.682000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffefc4ed90 a2=50 a3=0 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.682000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.691000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.691000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefc4ece8 a2=28 a3=ffffefc4ee18 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.691000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.692000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.692000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefc4ed18 a2=28 a3=ffffefc4ee48 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.692000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.692000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.692000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefc4ebc8 a2=28 a3=ffffefc4ecf8 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.692000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.692000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.692000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefc4ed38 a2=28 a3=ffffefc4ee68 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.692000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.692000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.692000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefc4ed18 a2=28 a3=ffffefc4ee48 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.692000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.692000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.692000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefc4ed08 a2=28 a3=ffffefc4ee38 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.692000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.692000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.692000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefc4ed38 a2=28 a3=ffffefc4ee68 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.692000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.692000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.692000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefc4ed18 a2=28 a3=ffffefc4ee48 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.692000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefc4ed38 a2=28 a3=ffffefc4ee68 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffefc4ed08 a2=28 a3=ffffefc4ee38 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffefc4ed88 a2=28 a3=ffffefc4eec8 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffefc4eac0 a2=50 a3=0 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.693000 audit: BPF prog-id=146 op=LOAD Dec 13 13:56:41.693000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffefc4eac8 a2=94 a3=5 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.694000 audit: BPF prog-id=146 op=UNLOAD Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffefc4ebd0 a2=50 a3=0 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffefc4ed18 a2=4 a3=3 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.694000 audit[3442]: AVC avc: denied { confidentiality } for pid=3442 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 13:56:41.694000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffefc4ecf8 a2=94 a3=6 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.695000 audit[3442]: AVC avc: denied { confidentiality } for pid=3442 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 13:56:41.695000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffefc4e4c8 a2=94 a3=83 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.695000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { perfmon } for pid=3442 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { bpf } for pid=3442 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.696000 audit[3442]: AVC avc: denied { confidentiality } for pid=3442 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 13:56:41.696000 audit[3442]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffefc4e4c8 a2=94 a3=83 items=0 ppid=3311 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.696000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.712000 audit: BPF prog-id=147 op=LOAD Dec 13 13:56:41.712000 audit[3453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffeaa17848 a2=98 a3=ffffeaa17838 items=0 ppid=3311 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.712000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 13:56:41.712000 audit: BPF prog-id=147 op=UNLOAD Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit: BPF prog-id=148 op=LOAD Dec 13 13:56:41.713000 audit[3453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffeaa176f8 a2=74 a3=95 items=0 ppid=3311 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.713000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 13:56:41.713000 audit: BPF prog-id=148 op=UNLOAD Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { perfmon } for pid=3453 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit[3453]: AVC avc: denied { bpf } for pid=3453 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.713000 audit: BPF prog-id=149 op=LOAD Dec 13 13:56:41.713000 audit[3453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffeaa17728 a2=40 a3=ffffeaa17758 items=0 ppid=3311 pid=3453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.713000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Dec 13 13:56:41.714000 audit: BPF prog-id=149 op=UNLOAD Dec 13 13:56:41.773007 systemd-networkd[1055]: vxlan.calico: Link UP Dec 13 13:56:41.773019 systemd-networkd[1055]: vxlan.calico: Gained carrier Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit: BPF prog-id=150 op=LOAD Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe883d288 a2=98 a3=ffffe883d278 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit: BPF prog-id=150 op=UNLOAD Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit: BPF prog-id=151 op=LOAD Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe883cf68 a2=74 a3=95 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit: BPF prog-id=151 op=UNLOAD Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit: BPF prog-id=152 op=LOAD Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe883cfc8 a2=94 a3=2 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit: BPF prog-id=152 op=UNLOAD Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe883cff8 a2=28 a3=ffffe883d128 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe883d028 a2=28 a3=ffffe883d158 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe883ced8 a2=28 a3=ffffe883d008 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe883d048 a2=28 a3=ffffe883d178 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe883d028 a2=28 a3=ffffe883d158 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe883d018 a2=28 a3=ffffe883d148 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe883d048 a2=28 a3=ffffe883d178 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.815000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.815000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe883d028 a2=28 a3=ffffe883d158 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.815000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe883d048 a2=28 a3=ffffe883d178 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.816000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe883d018 a2=28 a3=ffffe883d148 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.816000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe883d098 a2=28 a3=ffffe883d1d8 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.816000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit: BPF prog-id=153 op=LOAD Dec 13 13:56:41.816000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe883ceb8 a2=40 a3=ffffe883cee8 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.816000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.816000 audit: BPF prog-id=153 op=UNLOAD Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe883cee0 a2=50 a3=0 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.816000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe883cee0 a2=50 a3=0 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.816000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.816000 audit: BPF prog-id=154 op=LOAD Dec 13 13:56:41.816000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe883c648 a2=94 a3=2 items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.816000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.817000 audit: BPF prog-id=154 op=UNLOAD Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { perfmon } for pid=3482 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit[3482]: AVC avc: denied { bpf } for pid=3482 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.817000 audit: BPF prog-id=155 op=LOAD Dec 13 13:56:41.817000 audit[3482]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe883c7d8 a2=94 a3=2d items=0 ppid=3311 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.817000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.820000 audit: BPF prog-id=156 op=LOAD Dec 13 13:56:41.820000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe28c6618 a2=98 a3=ffffe28c6608 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.820000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.820000 audit: BPF prog-id=156 op=UNLOAD Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit: BPF prog-id=157 op=LOAD Dec 13 13:56:41.821000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe28c62a8 a2=74 a3=95 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.821000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.821000 audit: BPF prog-id=157 op=UNLOAD Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.821000 audit: BPF prog-id=158 op=LOAD Dec 13 13:56:41.821000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe28c6308 a2=94 a3=2 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.821000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.821000 audit: BPF prog-id=158 op=UNLOAD Dec 13 13:56:41.871835 systemd[1]: Started sshd@11-10.0.0.14:22-10.0.0.1:48910.service. Dec 13 13:56:41.872250 sshd[3437]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:41.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.14:22-10.0.0.1:48910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:41.872000 audit[3437]: USER_END pid=3437 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.872000 audit[3437]: CRED_DISP pid=3437 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.884700 systemd-logind[1209]: Session 11 logged out. Waiting for processes to exit. Dec 13 13:56:41.895548 systemd[1]: session-11.scope: Deactivated successfully. Dec 13 13:56:41.896223 systemd[1]: sshd@10-10.0.0.14:22-10.0.0.1:48906.service: Deactivated successfully. Dec 13 13:56:41.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.14:22-10.0.0.1:48906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:41.902093 systemd-logind[1209]: Removed session 11. Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.924000 audit: BPF prog-id=159 op=LOAD Dec 13 13:56:41.924000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe28c62c8 a2=40 a3=ffffe28c62f8 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.924000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.924000 audit: BPF prog-id=159 op=UNLOAD Dec 13 13:56:41.925000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.925000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe28c63e0 a2=50 a3=0 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.925000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.933000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.933000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe28c6338 a2=28 a3=ffffe28c6468 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.933000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.934000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.934000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe28c6368 a2=28 a3=ffffe28c6498 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.934000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.934000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe28c6218 a2=28 a3=ffffe28c6348 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.934000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.934000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe28c6388 a2=28 a3=ffffe28c64b8 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.934000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.934000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe28c6368 a2=28 a3=ffffe28c6498 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.934000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.934000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe28c6358 a2=28 a3=ffffe28c6488 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.934000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.935000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.935000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe28c6388 a2=28 a3=ffffe28c64b8 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.935000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.935000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe28c6368 a2=28 a3=ffffe28c6498 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.935000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.935000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe28c6388 a2=28 a3=ffffe28c64b8 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.935000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.935000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe28c6358 a2=28 a3=ffffe28c6488 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.935000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.935000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe28c63d8 a2=28 a3=ffffe28c6518 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.935000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe28c6110 a2=50 a3=0 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.936000 audit: BPF prog-id=160 op=LOAD Dec 13 13:56:41.936000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe28c6118 a2=94 a3=5 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.936000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.937000 audit: BPF prog-id=160 op=UNLOAD Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe28c6220 a2=50 a3=0 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe28c6368 a2=4 a3=3 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.937000 audit[3484]: AVC avc: denied { confidentiality } for pid=3484 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 13:56:41.937000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe28c6348 a2=94 a3=6 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.937000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { confidentiality } for pid=3484 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 13:56:41.938000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe28c5b18 a2=94 a3=83 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.938000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.938000 audit[3484]: AVC avc: denied { confidentiality } for pid=3484 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Dec 13 13:56:41.938000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe28c5b18 a2=94 a3=83 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.938000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.940000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.940000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe28c7558 a2=10 a3=ffffe28c7648 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.940000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.940000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.940000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe28c7418 a2=10 a3=ffffe28c7508 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.940000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.940000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.940000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe28c7388 a2=10 a3=ffffe28c7508 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.940000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.940000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:41.940000 audit[3484]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe28c7388 a2=10 a3=ffffe28c7508 items=0 ppid=3311 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.940000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Dec 13 13:56:41.943000 audit[3493]: USER_ACCT pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.944581 sshd[3493]: Accepted publickey for core from 10.0.0.1 port 48910 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:41.945000 audit[3493]: CRED_ACQ pid=3493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.945000 audit[3493]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcc80360 a2=3 a3=1 items=0 ppid=1 pid=3493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:41.945000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:41.946941 sshd[3493]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:41.947000 audit: BPF prog-id=155 op=UNLOAD Dec 13 13:56:41.951120 systemd-logind[1209]: New session 12 of user core. Dec 13 13:56:41.952034 systemd[1]: Started session-12.scope. Dec 13 13:56:41.956000 audit[3493]: USER_START pid=3493 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:41.958000 audit[3502]: CRED_ACQ pid=3502 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:42.003000 audit[3519]: NETFILTER_CFG table=mangle:97 family=2 entries=16 op=nft_register_chain pid=3519 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:42.003000 audit[3519]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffc65491d0 a2=0 a3=ffffbbcb3fa8 items=0 ppid=3311 pid=3519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:42.003000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:42.009000 audit[3520]: NETFILTER_CFG table=nat:98 family=2 entries=15 op=nft_register_chain pid=3520 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:42.009000 audit[3520]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd7d06f20 a2=0 a3=ffff86b12fa8 items=0 ppid=3311 pid=3520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:42.009000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:42.017000 audit[3523]: NETFILTER_CFG table=filter:99 family=2 entries=39 op=nft_register_chain pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:42.017000 audit[3523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=fffff956c7e0 a2=0 a3=ffffac94ffa8 items=0 ppid=3311 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:42.017000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:42.029000 audit[3518]: NETFILTER_CFG table=raw:100 family=2 entries=21 op=nft_register_chain pid=3518 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:42.029000 audit[3518]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffc6291880 a2=0 a3=ffffb9514fa8 items=0 ppid=3311 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:42.029000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:42.109831 sshd[3493]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:42.109000 audit[3493]: USER_END pid=3493 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:42.109000 audit[3493]: CRED_DISP pid=3493 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:42.112222 systemd[1]: sshd@11-10.0.0.14:22-10.0.0.1:48910.service: Deactivated successfully. Dec 13 13:56:42.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.14:22-10.0.0.1:48910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:42.112940 systemd[1]: session-12.scope: Deactivated successfully. Dec 13 13:56:42.113472 systemd-logind[1209]: Session 12 logged out. Waiting for processes to exit. Dec 13 13:56:42.114112 systemd-logind[1209]: Removed session 12. Dec 13 13:56:43.021499 systemd-networkd[1055]: vxlan.calico: Gained IPv6LL Dec 13 13:56:45.013935 env[1220]: time="2024-12-13T13:56:45.013889614Z" level=info msg="StopPodSandbox for \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\"" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.105 [INFO][3556] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.106 [INFO][3556] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" iface="eth0" netns="/var/run/netns/cni-42e5f8e9-fd0a-df94-11ed-9df1d0d77546" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.107 [INFO][3556] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" iface="eth0" netns="/var/run/netns/cni-42e5f8e9-fd0a-df94-11ed-9df1d0d77546" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.107 [INFO][3556] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" iface="eth0" netns="/var/run/netns/cni-42e5f8e9-fd0a-df94-11ed-9df1d0d77546" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.107 [INFO][3556] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.107 [INFO][3556] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.210 [INFO][3563] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.211 [INFO][3563] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.211 [INFO][3563] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.255 [WARNING][3563] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.255 [INFO][3563] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.260 [INFO][3563] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:45.264195 env[1220]: 2024-12-13 13:56:45.262 [INFO][3556] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:56:45.264195 env[1220]: time="2024-12-13T13:56:45.264280305Z" level=info msg="TearDown network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\" successfully" Dec 13 13:56:45.264195 env[1220]: time="2024-12-13T13:56:45.264335548Z" level=info msg="StopPodSandbox for \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\" returns successfully" Dec 13 13:56:45.267395 env[1220]: time="2024-12-13T13:56:45.266967885Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68f8464d77-4k4gb,Uid:d7c8a806-427f-4e3e-ba41-2613240195fa,Namespace:calico-system,Attempt:1,}" Dec 13 13:56:45.266228 systemd[1]: run-netns-cni\x2d42e5f8e9\x2dfd0a\x2ddf94\x2d11ed\x2d9df1d0d77546.mount: Deactivated successfully. Dec 13 13:56:45.435863 systemd-networkd[1055]: cali0c4445f9649: Link UP Dec 13 13:56:45.436333 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Dec 13 13:56:45.436407 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0c4445f9649: link becomes ready Dec 13 13:56:45.436400 systemd-networkd[1055]: cali0c4445f9649: Gained carrier Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.358 [INFO][3575] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0 calico-kube-controllers-68f8464d77- calico-system d7c8a806-427f-4e3e-ba41-2613240195fa 899 0 2024-12-13 13:56:25 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:68f8464d77 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-68f8464d77-4k4gb eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali0c4445f9649 [] []}} ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.358 [INFO][3575] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.389 [INFO][3584] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" HandleID="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.400 [INFO][3584] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" HandleID="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000293a80), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-68f8464d77-4k4gb", "timestamp":"2024-12-13 13:56:45.38985881 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.401 [INFO][3584] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.401 [INFO][3584] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.401 [INFO][3584] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.402 [INFO][3584] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.410 [INFO][3584] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.414 [INFO][3584] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.416 [INFO][3584] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.418 [INFO][3584] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.418 [INFO][3584] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.420 [INFO][3584] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95 Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.424 [INFO][3584] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.430 [INFO][3584] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.430 [INFO][3584] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" host="localhost" Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.430 [INFO][3584] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:45.455426 env[1220]: 2024-12-13 13:56:45.430 [INFO][3584] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" HandleID="k8s-pod-network.64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.456384 env[1220]: 2024-12-13 13:56:45.432 [INFO][3575] cni-plugin/k8s.go 386: Populated endpoint ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0", GenerateName:"calico-kube-controllers-68f8464d77-", Namespace:"calico-system", SelfLink:"", UID:"d7c8a806-427f-4e3e-ba41-2613240195fa", ResourceVersion:"899", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68f8464d77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-68f8464d77-4k4gb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0c4445f9649", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:45.456384 env[1220]: 2024-12-13 13:56:45.432 [INFO][3575] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.129/32] ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.456384 env[1220]: 2024-12-13 13:56:45.432 [INFO][3575] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0c4445f9649 ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.456384 env[1220]: 2024-12-13 13:56:45.436 [INFO][3575] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.456384 env[1220]: 2024-12-13 13:56:45.437 [INFO][3575] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0", GenerateName:"calico-kube-controllers-68f8464d77-", Namespace:"calico-system", SelfLink:"", UID:"d7c8a806-427f-4e3e-ba41-2613240195fa", ResourceVersion:"899", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68f8464d77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95", Pod:"calico-kube-controllers-68f8464d77-4k4gb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0c4445f9649", MAC:"a6:10:a1:a5:0f:2e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:45.456384 env[1220]: 2024-12-13 13:56:45.450 [INFO][3575] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95" Namespace="calico-system" Pod="calico-kube-controllers-68f8464d77-4k4gb" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:56:45.461000 audit[3608]: NETFILTER_CFG table=filter:101 family=2 entries=34 op=nft_register_chain pid=3608 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:45.461000 audit[3608]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19148 a0=3 a1=fffff096cfd0 a2=0 a3=ffff83654fa8 items=0 ppid=3311 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:45.461000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:45.469209 env[1220]: time="2024-12-13T13:56:45.469138422Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:45.469209 env[1220]: time="2024-12-13T13:56:45.469184664Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:45.469424 env[1220]: time="2024-12-13T13:56:45.469194905Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:45.469735 env[1220]: time="2024-12-13T13:56:45.469698051Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95 pid=3615 runtime=io.containerd.runc.v2 Dec 13 13:56:45.485913 systemd[1]: Started cri-containerd-64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95.scope. Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit: BPF prog-id=161 op=LOAD Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3615 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:45.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634343334633236636439303762643538396335373261623432656662 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3615 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:45.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634343334633236636439303762643538396335373261623432656662 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit: BPF prog-id=162 op=LOAD Dec 13 13:56:45.502000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3615 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:45.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634343334633236636439303762643538396335373261623432656662 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit: BPF prog-id=163 op=LOAD Dec 13 13:56:45.502000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3615 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:45.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634343334633236636439303762643538396335373261623432656662 Dec 13 13:56:45.502000 audit: BPF prog-id=163 op=UNLOAD Dec 13 13:56:45.502000 audit: BPF prog-id=162 op=UNLOAD Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { perfmon } for pid=3626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit[3626]: AVC avc: denied { bpf } for pid=3626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:45.502000 audit: BPF prog-id=164 op=LOAD Dec 13 13:56:45.502000 audit[3626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3615 pid=3626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:45.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634343334633236636439303762643538396335373261623432656662 Dec 13 13:56:45.504829 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Dec 13 13:56:45.522569 env[1220]: time="2024-12-13T13:56:45.522473322Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-68f8464d77-4k4gb,Uid:d7c8a806-427f-4e3e-ba41-2613240195fa,Namespace:calico-system,Attempt:1,} returns sandbox id \"64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95\"" Dec 13 13:56:45.524003 env[1220]: time="2024-12-13T13:56:45.523889715Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\"" Dec 13 13:56:46.266255 systemd[1]: run-containerd-runc-k8s.io-64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95-runc.UQ1RDE.mount: Deactivated successfully. Dec 13 13:56:47.013479 env[1220]: time="2024-12-13T13:56:47.013432593Z" level=info msg="StopPodSandbox for \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\"" Dec 13 13:56:47.013871 env[1220]: time="2024-12-13T13:56:47.013504117Z" level=info msg="StopPodSandbox for \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\"" Dec 13 13:56:47.114828 systemd[1]: Started sshd@12-10.0.0.14:22-10.0.0.1:40154.service. Dec 13 13:56:47.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.14:22-10.0.0.1:40154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:47.115758 kernel: kauditd_printk_skb: 598 callbacks suppressed Dec 13 13:56:47.115927 kernel: audit: type=1130 audit(1734098207.113:1189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.14:22-10.0.0.1:40154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:47.119944 systemd-networkd[1055]: cali0c4445f9649: Gained IPv6LL Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.097 [INFO][3688] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.098 [INFO][3688] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" iface="eth0" netns="/var/run/netns/cni-33ee7591-57ef-b712-131a-dc7b250d9e5b" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.098 [INFO][3688] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" iface="eth0" netns="/var/run/netns/cni-33ee7591-57ef-b712-131a-dc7b250d9e5b" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.098 [INFO][3688] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" iface="eth0" netns="/var/run/netns/cni-33ee7591-57ef-b712-131a-dc7b250d9e5b" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.098 [INFO][3688] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.098 [INFO][3688] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.140 [INFO][3707] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.140 [INFO][3707] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.140 [INFO][3707] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.149 [WARNING][3707] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.149 [INFO][3707] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.151 [INFO][3707] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:47.154343 env[1220]: 2024-12-13 13:56:47.152 [INFO][3688] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:56:47.156556 systemd[1]: run-netns-cni\x2d33ee7591\x2d57ef\x2db712\x2d131a\x2ddc7b250d9e5b.mount: Deactivated successfully. Dec 13 13:56:47.157540 env[1220]: time="2024-12-13T13:56:47.157494426Z" level=info msg="TearDown network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\" successfully" Dec 13 13:56:47.157540 env[1220]: time="2024-12-13T13:56:47.157538668Z" level=info msg="StopPodSandbox for \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\" returns successfully" Dec 13 13:56:47.158438 env[1220]: time="2024-12-13T13:56:47.158405871Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-w7lzs,Uid:1403eb84-919f-4a7b-b1bb-3b5e0678848f,Namespace:calico-apiserver,Attempt:1,}" Dec 13 13:56:47.170000 audit[3720]: USER_ACCT pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.175569 sshd[3720]: Accepted publickey for core from 10.0.0.1 port 40154 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:47.175671 sshd[3720]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:47.172000 audit[3720]: CRED_ACQ pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.179253 kernel: audit: type=1101 audit(1734098207.170:1190): pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.179404 kernel: audit: type=1103 audit(1734098207.172:1191): pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.183733 kernel: audit: type=1006 audit(1734098207.172:1192): pid=3720 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Dec 13 13:56:47.183805 kernel: audit: type=1300 audit(1734098207.172:1192): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff7d6b30 a2=3 a3=1 items=0 ppid=1 pid=3720 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.172000 audit[3720]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff7d6b30 a2=3 a3=1 items=0 ppid=1 pid=3720 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.172000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:47.188701 kernel: audit: type=1327 audit(1734098207.172:1192): proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.108 [INFO][3695] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.109 [INFO][3695] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" iface="eth0" netns="/var/run/netns/cni-995bbc86-de7c-cd12-5028-4809a5baa857" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.109 [INFO][3695] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" iface="eth0" netns="/var/run/netns/cni-995bbc86-de7c-cd12-5028-4809a5baa857" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.109 [INFO][3695] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" iface="eth0" netns="/var/run/netns/cni-995bbc86-de7c-cd12-5028-4809a5baa857" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.109 [INFO][3695] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.109 [INFO][3695] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.153 [INFO][3713] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.154 [INFO][3713] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.154 [INFO][3713] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.166 [WARNING][3713] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.166 [INFO][3713] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.168 [INFO][3713] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:47.189800 env[1220]: 2024-12-13 13:56:47.187 [INFO][3695] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:56:47.192751 env[1220]: time="2024-12-13T13:56:47.190066172Z" level=info msg="TearDown network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\" successfully" Dec 13 13:56:47.192751 env[1220]: time="2024-12-13T13:56:47.190100814Z" level=info msg="StopPodSandbox for \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\" returns successfully" Dec 13 13:56:47.191794 systemd[1]: run-netns-cni\x2d995bbc86\x2dde7c\x2dcd12\x2d5028\x2d4809a5baa857.mount: Deactivated successfully. Dec 13 13:56:47.195720 systemd[1]: Started session-13.scope. Dec 13 13:56:47.197282 env[1220]: time="2024-12-13T13:56:47.197056681Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-9g529,Uid:59cb5242-a560-4729-b88e-546b5ca59812,Namespace:kube-system,Attempt:1,}" Dec 13 13:56:47.197335 kubelet[2068]: E1213 13:56:47.196237 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:47.196908 systemd-logind[1209]: New session 13 of user core. Dec 13 13:56:47.202000 audit[3720]: USER_START pid=3720 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.203000 audit[3738]: CRED_ACQ pid=3738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.210486 kernel: audit: type=1105 audit(1734098207.202:1193): pid=3720 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.210612 kernel: audit: type=1103 audit(1734098207.203:1194): pid=3738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.335125 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Dec 13 13:56:47.335271 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9185216b938: link becomes ready Dec 13 13:56:47.334775 systemd-networkd[1055]: cali9185216b938: Link UP Dec 13 13:56:47.334895 systemd-networkd[1055]: cali9185216b938: Gained carrier Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.230 [INFO][3725] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0 calico-apiserver-76d586d7df- calico-apiserver 1403eb84-919f-4a7b-b1bb-3b5e0678848f 923 0 2024-12-13 13:56:25 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:76d586d7df projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-76d586d7df-w7lzs eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali9185216b938 [] []}} ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.231 [INFO][3725] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.282 [INFO][3754] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" HandleID="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.301 [INFO][3754] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" HandleID="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400031ee00), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-76d586d7df-w7lzs", "timestamp":"2024-12-13 13:56:47.282374821 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.301 [INFO][3754] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.301 [INFO][3754] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.301 [INFO][3754] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.303 [INFO][3754] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.306 [INFO][3754] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.311 [INFO][3754] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.313 [INFO][3754] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.315 [INFO][3754] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.315 [INFO][3754] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.317 [INFO][3754] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.320 [INFO][3754] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.326 [INFO][3754] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.326 [INFO][3754] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" host="localhost" Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.326 [INFO][3754] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:47.349639 env[1220]: 2024-12-13 13:56:47.326 [INFO][3754] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" HandleID="k8s-pod-network.c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.350374 env[1220]: 2024-12-13 13:56:47.328 [INFO][3725] cni-plugin/k8s.go 386: Populated endpoint ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"1403eb84-919f-4a7b-b1bb-3b5e0678848f", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-76d586d7df-w7lzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9185216b938", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:47.350374 env[1220]: 2024-12-13 13:56:47.329 [INFO][3725] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.130/32] ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.350374 env[1220]: 2024-12-13 13:56:47.329 [INFO][3725] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9185216b938 ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.350374 env[1220]: 2024-12-13 13:56:47.333 [INFO][3725] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.350374 env[1220]: 2024-12-13 13:56:47.336 [INFO][3725] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"1403eb84-919f-4a7b-b1bb-3b5e0678848f", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e", Pod:"calico-apiserver-76d586d7df-w7lzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9185216b938", MAC:"02:69:ad:3d:aa:77", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:47.350374 env[1220]: 2024-12-13 13:56:47.347 [INFO][3725] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-w7lzs" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:56:47.360000 audit[3788]: NETFILTER_CFG table=filter:102 family=2 entries=44 op=nft_register_chain pid=3788 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:47.360000 audit[3788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24680 a0=3 a1=fffff3ad8cb0 a2=0 a3=ffffa78fefa8 items=0 ppid=3311 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.369139 kernel: audit: type=1325 audit(1734098207.360:1195): table=filter:102 family=2 entries=44 op=nft_register_chain pid=3788 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:47.369215 kernel: audit: type=1300 audit(1734098207.360:1195): arch=c00000b7 syscall=211 success=yes exit=24680 a0=3 a1=fffff3ad8cb0 a2=0 a3=ffffa78fefa8 items=0 ppid=3311 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.360000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:47.415795 sshd[3720]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:47.419000 audit[3720]: USER_END pid=3720 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.419000 audit[3720]: CRED_DISP pid=3720 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:47.423049 systemd[1]: sshd@12-10.0.0.14:22-10.0.0.1:40154.service: Deactivated successfully. Dec 13 13:56:47.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.14:22-10.0.0.1:40154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:47.423754 systemd[1]: session-13.scope: Deactivated successfully. Dec 13 13:56:47.423883 env[1220]: time="2024-12-13T13:56:47.415110648Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:47.423883 env[1220]: time="2024-12-13T13:56:47.415156930Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:47.423883 env[1220]: time="2024-12-13T13:56:47.415167291Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:47.423883 env[1220]: time="2024-12-13T13:56:47.415376781Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e pid=3803 runtime=io.containerd.runc.v2 Dec 13 13:56:47.424414 systemd-logind[1209]: Session 13 logged out. Waiting for processes to exit. Dec 13 13:56:47.425686 systemd-logind[1209]: Removed session 13. Dec 13 13:56:47.427452 systemd-networkd[1055]: cali786208dee5d: Link UP Dec 13 13:56:47.430039 systemd-networkd[1055]: cali786208dee5d: Gained carrier Dec 13 13:56:47.430420 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali786208dee5d: link becomes ready Dec 13 13:56:47.435097 systemd[1]: Started cri-containerd-c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e.scope. Dec 13 13:56:47.439858 systemd[1]: run-containerd-runc-k8s.io-c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e-runc.X2NWrD.mount: Deactivated successfully. Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.276 [INFO][3739] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7db6d8ff4d--9g529-eth0 coredns-7db6d8ff4d- kube-system 59cb5242-a560-4729-b88e-546b5ca59812 924 0 2024-12-13 13:56:18 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7db6d8ff4d-9g529 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali786208dee5d [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.276 [INFO][3739] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.328 [INFO][3771] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" HandleID="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.351 [INFO][3771] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" HandleID="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400036adb0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7db6d8ff4d-9g529", "timestamp":"2024-12-13 13:56:47.328348196 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.351 [INFO][3771] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.351 [INFO][3771] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.351 [INFO][3771] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.353 [INFO][3771] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.360 [INFO][3771] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.378 [INFO][3771] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.380 [INFO][3771] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.382 [INFO][3771] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.382 [INFO][3771] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.384 [INFO][3771] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.400 [INFO][3771] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.406 [INFO][3771] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.406 [INFO][3771] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" host="localhost" Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.406 [INFO][3771] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:47.447866 env[1220]: 2024-12-13 13:56:47.406 [INFO][3771] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" HandleID="k8s-pod-network.f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.448533 env[1220]: 2024-12-13 13:56:47.411 [INFO][3739] cni-plugin/k8s.go 386: Populated endpoint ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--9g529-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"59cb5242-a560-4729-b88e-546b5ca59812", ResourceVersion:"924", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7db6d8ff4d-9g529", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali786208dee5d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:47.448533 env[1220]: 2024-12-13 13:56:47.411 [INFO][3739] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.131/32] ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.448533 env[1220]: 2024-12-13 13:56:47.411 [INFO][3739] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali786208dee5d ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.448533 env[1220]: 2024-12-13 13:56:47.429 [INFO][3739] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.448533 env[1220]: 2024-12-13 13:56:47.430 [INFO][3739] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--9g529-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"59cb5242-a560-4729-b88e-546b5ca59812", ResourceVersion:"924", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa", Pod:"coredns-7db6d8ff4d-9g529", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali786208dee5d", MAC:"4a:ab:3f:a2:5f:9b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:47.448533 env[1220]: 2024-12-13 13:56:47.446 [INFO][3739] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa" Namespace="kube-system" Pod="coredns-7db6d8ff4d-9g529" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:56:47.454000 audit[3841]: NETFILTER_CFG table=filter:103 family=2 entries=42 op=nft_register_chain pid=3841 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:47.454000 audit[3841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21524 a0=3 a1=ffffeb25a570 a2=0 a3=ffff98dc6fa8 items=0 ppid=3311 pid=3841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.454000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:47.463351 env[1220]: time="2024-12-13T13:56:47.463234611Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:47.463351 env[1220]: time="2024-12-13T13:56:47.463290254Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:47.463659 env[1220]: time="2024-12-13T13:56:47.463392579Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:47.463789 env[1220]: time="2024-12-13T13:56:47.463750317Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa pid=3851 runtime=io.containerd.runc.v2 Dec 13 13:56:47.490832 systemd[1]: Started cri-containerd-f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa.scope. Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.520000 audit: BPF prog-id=165 op=LOAD Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3803 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335366130646235303337366132373664313262643535316330663233 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3803 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335366130646235303337366132373664313262643535316330663233 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.521000 audit: BPF prog-id=166 op=LOAD Dec 13 13:56:47.521000 audit[3814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3803 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335366130646235303337366132373664313262643535316330663233 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.522000 audit: BPF prog-id=167 op=LOAD Dec 13 13:56:47.522000 audit[3814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3803 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335366130646235303337366132373664313262643535316330663233 Dec 13 13:56:47.523000 audit: BPF prog-id=167 op=UNLOAD Dec 13 13:56:47.523000 audit: BPF prog-id=166 op=UNLOAD Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.523000 audit: BPF prog-id=168 op=LOAD Dec 13 13:56:47.523000 audit[3814]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3803 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335366130646235303337366132373664313262643535316330663233 Dec 13 13:56:47.525982 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.525000 audit: BPF prog-id=169 op=LOAD Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3851 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343365636533313832363462383839633434333239613665323239 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3851 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343365636533313832363462383839633434333239613665323239 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.526000 audit: BPF prog-id=170 op=LOAD Dec 13 13:56:47.526000 audit[3861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3851 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343365636533313832363462383839633434333239613665323239 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.527000 audit: BPF prog-id=171 op=LOAD Dec 13 13:56:47.527000 audit[3861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3851 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343365636533313832363462383839633434333239613665323239 Dec 13 13:56:47.528000 audit: BPF prog-id=171 op=UNLOAD Dec 13 13:56:47.528000 audit: BPF prog-id=170 op=UNLOAD Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { perfmon } for pid=3861 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit[3861]: AVC avc: denied { bpf } for pid=3861 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.528000 audit: BPF prog-id=172 op=LOAD Dec 13 13:56:47.528000 audit[3861]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3851 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631343365636533313832363462383839633434333239613665323239 Dec 13 13:56:47.530860 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Dec 13 13:56:47.556781 env[1220]: time="2024-12-13T13:56:47.556738519Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-9g529,Uid:59cb5242-a560-4729-b88e-546b5ca59812,Namespace:kube-system,Attempt:1,} returns sandbox id \"f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa\"" Dec 13 13:56:47.559185 kubelet[2068]: E1213 13:56:47.557500 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:47.561611 env[1220]: time="2024-12-13T13:56:47.561257425Z" level=info msg="CreateContainer within sandbox \"f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Dec 13 13:56:47.574396 env[1220]: time="2024-12-13T13:56:47.574334998Z" level=info msg="CreateContainer within sandbox \"f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"80a2b1e33f2f3ef3fa100a72bd4d278340225d541a70ea61b9b5ba32dba49717\"" Dec 13 13:56:47.576114 env[1220]: time="2024-12-13T13:56:47.575166239Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-w7lzs,Uid:1403eb84-919f-4a7b-b1bb-3b5e0678848f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e\"" Dec 13 13:56:47.576114 env[1220]: time="2024-12-13T13:56:47.575349569Z" level=info msg="StartContainer for \"80a2b1e33f2f3ef3fa100a72bd4d278340225d541a70ea61b9b5ba32dba49717\"" Dec 13 13:56:47.592297 systemd[1]: Started cri-containerd-80a2b1e33f2f3ef3fa100a72bd4d278340225d541a70ea61b9b5ba32dba49717.scope. Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.613000 audit: BPF prog-id=173 op=LOAD Dec 13 13:56:47.614000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.614000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3851 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613262316533336632663365663366613130306137326264346432 Dec 13 13:56:47.614000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.614000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3851 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613262316533336632663365663366613130306137326264346432 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.615000 audit: BPF prog-id=174 op=LOAD Dec 13 13:56:47.615000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3851 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613262316533336632663365663366613130306137326264346432 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit: BPF prog-id=175 op=LOAD Dec 13 13:56:47.620000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3851 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613262316533336632663365663366613130306137326264346432 Dec 13 13:56:47.620000 audit: BPF prog-id=175 op=UNLOAD Dec 13 13:56:47.620000 audit: BPF prog-id=174 op=UNLOAD Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.620000 audit: BPF prog-id=176 op=LOAD Dec 13 13:56:47.620000 audit[3900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3851 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830613262316533336632663365663366613130306137326264346432 Dec 13 13:56:47.662307 env[1220]: time="2024-12-13T13:56:47.662245867Z" level=info msg="StartContainer for \"80a2b1e33f2f3ef3fa100a72bd4d278340225d541a70ea61b9b5ba32dba49717\" returns successfully" Dec 13 13:56:47.755037 env[1220]: time="2024-12-13T13:56:47.754988538Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:47.756534 env[1220]: time="2024-12-13T13:56:47.756504613Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:32c335fdb9d757e7ba6a76a9cfa8d292a5a229101ae7ea37b42f53c28adf2db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:47.758554 env[1220]: time="2024-12-13T13:56:47.758525834Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:47.760919 env[1220]: time="2024-12-13T13:56:47.760876912Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:1072d6a98167a14ca361e9ce757733f9bae36d1f1c6a9621ea10934b6b1e10d9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:47.761194 env[1220]: time="2024-12-13T13:56:47.761157446Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\" returns image reference \"sha256:32c335fdb9d757e7ba6a76a9cfa8d292a5a229101ae7ea37b42f53c28adf2db1\"" Dec 13 13:56:47.762771 env[1220]: time="2024-12-13T13:56:47.762733564Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Dec 13 13:56:47.770434 env[1220]: time="2024-12-13T13:56:47.770389667Z" level=info msg="CreateContainer within sandbox \"64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Dec 13 13:56:47.782334 env[1220]: time="2024-12-13T13:56:47.782278780Z" level=info msg="CreateContainer within sandbox \"64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"088e268ddc1395913ae8987ec3d59988ca6f3e817423b555010da2ce1c6f2be4\"" Dec 13 13:56:47.782843 env[1220]: time="2024-12-13T13:56:47.782815167Z" level=info msg="StartContainer for \"088e268ddc1395913ae8987ec3d59988ca6f3e817423b555010da2ce1c6f2be4\"" Dec 13 13:56:47.807852 systemd[1]: Started cri-containerd-088e268ddc1395913ae8987ec3d59988ca6f3e817423b555010da2ce1c6f2be4.scope. Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit: BPF prog-id=177 op=LOAD Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3615 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386532363864646331333935393133616538393837656333643539 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3615 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386532363864646331333935393133616538393837656333643539 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit: BPF prog-id=178 op=LOAD Dec 13 13:56:47.837000 audit[3938]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3615 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386532363864646331333935393133616538393837656333643539 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.837000 audit: BPF prog-id=179 op=LOAD Dec 13 13:56:47.837000 audit[3938]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3615 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386532363864646331333935393133616538393837656333643539 Dec 13 13:56:47.837000 audit: BPF prog-id=179 op=UNLOAD Dec 13 13:56:47.838000 audit: BPF prog-id=178 op=UNLOAD Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { perfmon } for pid=3938 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit[3938]: AVC avc: denied { bpf } for pid=3938 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:47.838000 audit: BPF prog-id=180 op=LOAD Dec 13 13:56:47.838000 audit[3938]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3615 pid=3938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:47.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386532363864646331333935393133616538393837656333643539 Dec 13 13:56:47.867533 env[1220]: time="2024-12-13T13:56:47.867486994Z" level=info msg="StartContainer for \"088e268ddc1395913ae8987ec3d59988ca6f3e817423b555010da2ce1c6f2be4\" returns successfully" Dec 13 13:56:48.014694 env[1220]: time="2024-12-13T13:56:48.014644328Z" level=info msg="StopPodSandbox for \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\"" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.058 [INFO][3986] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.058 [INFO][3986] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" iface="eth0" netns="/var/run/netns/cni-e918ff47-9993-733d-20e9-8c6662d7fad4" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.058 [INFO][3986] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" iface="eth0" netns="/var/run/netns/cni-e918ff47-9993-733d-20e9-8c6662d7fad4" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.058 [INFO][3986] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" iface="eth0" netns="/var/run/netns/cni-e918ff47-9993-733d-20e9-8c6662d7fad4" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.058 [INFO][3986] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.059 [INFO][3986] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.077 [INFO][3994] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.077 [INFO][3994] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.077 [INFO][3994] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.085 [WARNING][3994] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.085 [INFO][3994] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.086 [INFO][3994] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:48.090512 env[1220]: 2024-12-13 13:56:48.088 [INFO][3986] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:56:48.091056 env[1220]: time="2024-12-13T13:56:48.090621006Z" level=info msg="TearDown network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\" successfully" Dec 13 13:56:48.091056 env[1220]: time="2024-12-13T13:56:48.090657408Z" level=info msg="StopPodSandbox for \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\" returns successfully" Dec 13 13:56:48.091423 env[1220]: time="2024-12-13T13:56:48.091395604Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-89t4v,Uid:52ebe7ce-d5af-4651-afd2-0f235a5e223f,Namespace:calico-apiserver,Attempt:1,}" Dec 13 13:56:48.148315 kubelet[2068]: E1213 13:56:48.148116 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:48.166484 kubelet[2068]: I1213 13:56:48.163171 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-68f8464d77-4k4gb" podStartSLOduration=20.924493636 podStartE2EDuration="23.163141635s" podCreationTimestamp="2024-12-13 13:56:25 +0000 UTC" firstStartedPulling="2024-12-13 13:56:45.523628942 +0000 UTC m=+43.592958453" lastFinishedPulling="2024-12-13 13:56:47.762276941 +0000 UTC m=+45.831606452" observedRunningTime="2024-12-13 13:56:48.150199322 +0000 UTC m=+46.219528833" watchObservedRunningTime="2024-12-13 13:56:48.163141635 +0000 UTC m=+46.232471146" Dec 13 13:56:48.191000 audit[4040]: NETFILTER_CFG table=filter:104 family=2 entries=13 op=nft_register_rule pid=4040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:48.191000 audit[4040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffe89171d0 a2=0 a3=1 items=0 ppid=2264 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.191000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:48.198000 audit[4040]: NETFILTER_CFG table=nat:105 family=2 entries=35 op=nft_register_chain pid=4040 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:48.198000 audit[4040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe89171d0 a2=0 a3=1 items=0 ppid=2264 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.198000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:48.213920 kubelet[2068]: I1213 13:56:48.213861 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-9g529" podStartSLOduration=30.213845876 podStartE2EDuration="30.213845876s" podCreationTimestamp="2024-12-13 13:56:18 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 13:56:48.166152422 +0000 UTC m=+46.235481933" watchObservedRunningTime="2024-12-13 13:56:48.213845876 +0000 UTC m=+46.283175387" Dec 13 13:56:48.242921 systemd-networkd[1055]: cali91b63816a51: Link UP Dec 13 13:56:48.244235 systemd-networkd[1055]: cali91b63816a51: Gained carrier Dec 13 13:56:48.244398 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali91b63816a51: link becomes ready Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.134 [INFO][4001] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0 calico-apiserver-76d586d7df- calico-apiserver 52ebe7ce-d5af-4651-afd2-0f235a5e223f 949 0 2024-12-13 13:56:25 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:76d586d7df projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-76d586d7df-89t4v eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali91b63816a51 [] []}} ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.134 [INFO][4001] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.192 [INFO][4014] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" HandleID="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.205 [INFO][4014] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" HandleID="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003aaa80), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-76d586d7df-89t4v", "timestamp":"2024-12-13 13:56:48.192958694 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.205 [INFO][4014] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.205 [INFO][4014] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.205 [INFO][4014] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.207 [INFO][4014] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.216 [INFO][4014] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.223 [INFO][4014] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.225 [INFO][4014] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.227 [INFO][4014] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.228 [INFO][4014] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.229 [INFO][4014] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.232 [INFO][4014] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.238 [INFO][4014] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.238 [INFO][4014] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" host="localhost" Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.238 [INFO][4014] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:48.257288 env[1220]: 2024-12-13 13:56:48.238 [INFO][4014] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" HandleID="k8s-pod-network.608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.257853 env[1220]: 2024-12-13 13:56:48.240 [INFO][4001] cni-plugin/k8s.go 386: Populated endpoint ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"52ebe7ce-d5af-4651-afd2-0f235a5e223f", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-76d586d7df-89t4v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali91b63816a51", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:48.257853 env[1220]: 2024-12-13 13:56:48.241 [INFO][4001] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.132/32] ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.257853 env[1220]: 2024-12-13 13:56:48.241 [INFO][4001] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali91b63816a51 ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.257853 env[1220]: 2024-12-13 13:56:48.244 [INFO][4001] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.257853 env[1220]: 2024-12-13 13:56:48.245 [INFO][4001] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"52ebe7ce-d5af-4651-afd2-0f235a5e223f", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae", Pod:"calico-apiserver-76d586d7df-89t4v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali91b63816a51", MAC:"0e:c5:e5:59:88:e1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:48.257853 env[1220]: 2024-12-13 13:56:48.254 [INFO][4001] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae" Namespace="calico-apiserver" Pod="calico-apiserver-76d586d7df-89t4v" WorkloadEndpoint="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:56:48.269511 systemd[1]: run-netns-cni\x2de918ff47\x2d9993\x2d733d\x2d20e9\x2d8c6662d7fad4.mount: Deactivated successfully. Dec 13 13:56:48.275412 env[1220]: time="2024-12-13T13:56:48.274789458Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:48.275412 env[1220]: time="2024-12-13T13:56:48.274827700Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:48.275412 env[1220]: time="2024-12-13T13:56:48.274837741Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:48.275412 env[1220]: time="2024-12-13T13:56:48.275047791Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae pid=4065 runtime=io.containerd.runc.v2 Dec 13 13:56:48.276000 audit[4075]: NETFILTER_CFG table=filter:106 family=2 entries=48 op=nft_register_chain pid=4075 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:48.276000 audit[4075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25556 a0=3 a1=ffffd0a7e240 a2=0 a3=ffff9ead7fa8 items=0 ppid=3311 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.276000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:48.291718 systemd[1]: run-containerd-runc-k8s.io-608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae-runc.yyoc1I.mount: Deactivated successfully. Dec 13 13:56:48.294808 systemd[1]: Started cri-containerd-608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae.scope. Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.310000 audit: BPF prog-id=181 op=LOAD Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4065 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630383233316263343036373230386131356333393238383666316261 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4065 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630383233316263343036373230386131356333393238383666316261 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit: BPF prog-id=182 op=LOAD Dec 13 13:56:48.311000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4065 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630383233316263343036373230386131356333393238383666316261 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit: BPF prog-id=183 op=LOAD Dec 13 13:56:48.311000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4065 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630383233316263343036373230386131356333393238383666316261 Dec 13 13:56:48.311000 audit: BPF prog-id=183 op=UNLOAD Dec 13 13:56:48.311000 audit: BPF prog-id=182 op=UNLOAD Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:48.311000 audit: BPF prog-id=184 op=LOAD Dec 13 13:56:48.311000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4065 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:48.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630383233316263343036373230386131356333393238383666316261 Dec 13 13:56:48.313397 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Dec 13 13:56:48.329773 env[1220]: time="2024-12-13T13:56:48.329729907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-76d586d7df-89t4v,Uid:52ebe7ce-d5af-4651-afd2-0f235a5e223f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae\"" Dec 13 13:56:49.018396 env[1220]: time="2024-12-13T13:56:49.018202261Z" level=info msg="StopPodSandbox for \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\"" Dec 13 13:56:49.018396 env[1220]: time="2024-12-13T13:56:49.018224582Z" level=info msg="StopPodSandbox for \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\"" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.084 [INFO][4136] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.084 [INFO][4136] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" iface="eth0" netns="/var/run/netns/cni-5b70c65c-cadb-7b6f-fd79-bf64f274c205" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.086 [INFO][4136] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" iface="eth0" netns="/var/run/netns/cni-5b70c65c-cadb-7b6f-fd79-bf64f274c205" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.086 [INFO][4136] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" iface="eth0" netns="/var/run/netns/cni-5b70c65c-cadb-7b6f-fd79-bf64f274c205" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.086 [INFO][4136] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.086 [INFO][4136] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.117 [INFO][4150] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.117 [INFO][4150] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.118 [INFO][4150] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.127 [WARNING][4150] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.127 [INFO][4150] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.128 [INFO][4150] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:49.133734 env[1220]: 2024-12-13 13:56:49.130 [INFO][4136] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:56:49.134418 env[1220]: time="2024-12-13T13:56:49.134384878Z" level=info msg="TearDown network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\" successfully" Dec 13 13:56:49.134506 env[1220]: time="2024-12-13T13:56:49.134487963Z" level=info msg="StopPodSandbox for \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\" returns successfully" Dec 13 13:56:49.136530 systemd[1]: run-netns-cni\x2d5b70c65c\x2dcadb\x2d7b6f\x2dfd79\x2dbf64f274c205.mount: Deactivated successfully. Dec 13 13:56:49.136955 kubelet[2068]: E1213 13:56:49.136788 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:49.137803 env[1220]: time="2024-12-13T13:56:49.137762920Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-dxkkw,Uid:c5db530d-1da7-4678-a568-be34cbdec141,Namespace:kube-system,Attempt:1,}" Dec 13 13:56:49.153645 kubelet[2068]: E1213 13:56:49.153614 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.085 [INFO][4135] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.086 [INFO][4135] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" iface="eth0" netns="/var/run/netns/cni-6b7129b6-db7d-04f0-dbb9-24112c7c17ff" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.086 [INFO][4135] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" iface="eth0" netns="/var/run/netns/cni-6b7129b6-db7d-04f0-dbb9-24112c7c17ff" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.086 [INFO][4135] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" iface="eth0" netns="/var/run/netns/cni-6b7129b6-db7d-04f0-dbb9-24112c7c17ff" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.086 [INFO][4135] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.086 [INFO][4135] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.142 [INFO][4151] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.142 [INFO][4151] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.142 [INFO][4151] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.151 [WARNING][4151] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.151 [INFO][4151] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.153 [INFO][4151] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:49.158309 env[1220]: 2024-12-13 13:56:49.155 [INFO][4135] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:56:49.158770 env[1220]: time="2024-12-13T13:56:49.158513876Z" level=info msg="TearDown network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\" successfully" Dec 13 13:56:49.158770 env[1220]: time="2024-12-13T13:56:49.158546077Z" level=info msg="StopPodSandbox for \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\" returns successfully" Dec 13 13:56:49.159135 env[1220]: time="2024-12-13T13:56:49.159107864Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nk6d6,Uid:9baa3386-bb08-4023-b9a1-0a8007c16bf7,Namespace:calico-system,Attempt:1,}" Dec 13 13:56:49.268249 systemd[1]: run-netns-cni\x2d6b7129b6\x2ddb7d\x2d04f0\x2ddbb9\x2d24112c7c17ff.mount: Deactivated successfully. Dec 13 13:56:49.296982 systemd-networkd[1055]: cali786208dee5d: Gained IPv6LL Dec 13 13:56:49.297225 systemd-networkd[1055]: cali9185216b938: Gained IPv6LL Dec 13 13:56:49.347408 systemd-networkd[1055]: cali6548b26db62: Link UP Dec 13 13:56:49.348808 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Dec 13 13:56:49.348889 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6548b26db62: link becomes ready Dec 13 13:56:49.348960 systemd-networkd[1055]: cali6548b26db62: Gained carrier Dec 13 13:56:49.359006 systemd-networkd[1055]: cali91b63816a51: Gained IPv6LL Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.253 [INFO][4170] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0 coredns-7db6d8ff4d- kube-system c5db530d-1da7-4678-a568-be34cbdec141 968 0 2024-12-13 13:56:18 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7db6d8ff4d-dxkkw eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6548b26db62 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.253 [INFO][4170] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.303 [INFO][4195] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" HandleID="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.317 [INFO][4195] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" HandleID="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400026e820), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7db6d8ff4d-dxkkw", "timestamp":"2024-12-13 13:56:49.30317382 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.317 [INFO][4195] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.317 [INFO][4195] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.317 [INFO][4195] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.319 [INFO][4195] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.324 [INFO][4195] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.327 [INFO][4195] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.329 [INFO][4195] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.331 [INFO][4195] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.331 [INFO][4195] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.332 [INFO][4195] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0 Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.336 [INFO][4195] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.342 [INFO][4195] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.342 [INFO][4195] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" host="localhost" Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.342 [INFO][4195] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:49.361819 env[1220]: 2024-12-13 13:56:49.342 [INFO][4195] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" HandleID="k8s-pod-network.ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.362478 env[1220]: 2024-12-13 13:56:49.345 [INFO][4170] cni-plugin/k8s.go 386: Populated endpoint ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"c5db530d-1da7-4678-a568-be34cbdec141", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7db6d8ff4d-dxkkw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6548b26db62", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:49.362478 env[1220]: 2024-12-13 13:56:49.345 [INFO][4170] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.133/32] ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.362478 env[1220]: 2024-12-13 13:56:49.345 [INFO][4170] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6548b26db62 ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.362478 env[1220]: 2024-12-13 13:56:49.349 [INFO][4170] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.362478 env[1220]: 2024-12-13 13:56:49.349 [INFO][4170] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"c5db530d-1da7-4678-a568-be34cbdec141", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0", Pod:"coredns-7db6d8ff4d-dxkkw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6548b26db62", MAC:"be:75:ea:1c:71:a7", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:49.362478 env[1220]: 2024-12-13 13:56:49.357 [INFO][4170] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0" Namespace="kube-system" Pod="coredns-7db6d8ff4d-dxkkw" WorkloadEndpoint="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:56:49.369000 audit[4220]: NETFILTER_CFG table=filter:107 family=2 entries=38 op=nft_register_chain pid=4220 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:49.369000 audit[4220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19392 a0=3 a1=ffffdbaa6c80 a2=0 a3=ffffac67afa8 items=0 ppid=3311 pid=4220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.369000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:49.389374 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali303d3009d5e: link becomes ready Dec 13 13:56:49.392446 systemd-networkd[1055]: cali303d3009d5e: Link UP Dec 13 13:56:49.392628 systemd-networkd[1055]: cali303d3009d5e: Gained carrier Dec 13 13:56:49.400546 env[1220]: time="2024-12-13T13:56:49.400328163Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:49.400546 env[1220]: time="2024-12-13T13:56:49.400400087Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:49.400546 env[1220]: time="2024-12-13T13:56:49.400410327Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.257 [INFO][4165] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--nk6d6-eth0 csi-node-driver- calico-system 9baa3386-bb08-4023-b9a1-0a8007c16bf7 967 0 2024-12-13 13:56:25 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:65bf684474 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-nk6d6 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali303d3009d5e [] []}} ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.257 [INFO][4165] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.303 [INFO][4196] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" HandleID="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.318 [INFO][4196] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" HandleID="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003b2d50), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-nk6d6", "timestamp":"2024-12-13 13:56:49.303279785 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.318 [INFO][4196] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.342 [INFO][4196] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.342 [INFO][4196] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.344 [INFO][4196] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.355 [INFO][4196] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.365 [INFO][4196] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.367 [INFO][4196] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.369 [INFO][4196] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.369 [INFO][4196] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.371 [INFO][4196] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.374 [INFO][4196] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.380 [INFO][4196] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.380 [INFO][4196] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" host="localhost" Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.380 [INFO][4196] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:56:49.400845 env[1220]: 2024-12-13 13:56:49.380 [INFO][4196] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" HandleID="k8s-pod-network.b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.401380 env[1220]: 2024-12-13 13:56:49.385 [INFO][4165] cni-plugin/k8s.go 386: Populated endpoint ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nk6d6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9baa3386-bb08-4023-b9a1-0a8007c16bf7", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-nk6d6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali303d3009d5e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:49.401380 env[1220]: 2024-12-13 13:56:49.385 [INFO][4165] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.134/32] ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.401380 env[1220]: 2024-12-13 13:56:49.385 [INFO][4165] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali303d3009d5e ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.401380 env[1220]: 2024-12-13 13:56:49.388 [INFO][4165] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.401380 env[1220]: 2024-12-13 13:56:49.389 [INFO][4165] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nk6d6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9baa3386-bb08-4023-b9a1-0a8007c16bf7", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d", Pod:"csi-node-driver-nk6d6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali303d3009d5e", MAC:"52:17:44:30:72:1b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:56:49.401380 env[1220]: 2024-12-13 13:56:49.396 [INFO][4165] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d" Namespace="calico-system" Pod="csi-node-driver-nk6d6" WorkloadEndpoint="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:56:49.401380 env[1220]: time="2024-12-13T13:56:49.400754824Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0 pid=4233 runtime=io.containerd.runc.v2 Dec 13 13:56:49.408000 audit[4249]: NETFILTER_CFG table=filter:108 family=2 entries=46 op=nft_register_chain pid=4249 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Dec 13 13:56:49.408000 audit[4249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22188 a0=3 a1=ffffd4f69770 a2=0 a3=ffffb366efa8 items=0 ppid=3311 pid=4249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.408000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Dec 13 13:56:49.419280 systemd[1]: Started cri-containerd-ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0.scope. Dec 13 13:56:49.429512 env[1220]: time="2024-12-13T13:56:49.429432560Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Dec 13 13:56:49.429512 env[1220]: time="2024-12-13T13:56:49.429480803Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Dec 13 13:56:49.429512 env[1220]: time="2024-12-13T13:56:49.429491123Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Dec 13 13:56:49.429914 env[1220]: time="2024-12-13T13:56:49.429873822Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d pid=4275 runtime=io.containerd.runc.v2 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.464000 audit: BPF prog-id=185 op=LOAD Dec 13 13:56:49.465000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.465000 audit[4248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313830386536393939626266363539333532636565636663326637 Dec 13 13:56:49.465000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.465000 audit[4248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.467501 systemd[1]: Started cri-containerd-b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d.scope. Dec 13 13:56:49.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313830386536393939626266363539333532636565636663326637 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit: BPF prog-id=186 op=LOAD Dec 13 13:56:49.467000 audit[4248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313830386536393939626266363539333532636565636663326637 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit: BPF prog-id=187 op=LOAD Dec 13 13:56:49.467000 audit[4248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313830386536393939626266363539333532636565636663326637 Dec 13 13:56:49.467000 audit: BPF prog-id=187 op=UNLOAD Dec 13 13:56:49.467000 audit: BPF prog-id=186 op=UNLOAD Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.467000 audit: BPF prog-id=188 op=LOAD Dec 13 13:56:49.467000 audit[4248]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313830386536393939626266363539333532636565636663326637 Dec 13 13:56:49.469227 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Dec 13 13:56:49.495112 env[1220]: time="2024-12-13T13:56:49.495047910Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-dxkkw,Uid:c5db530d-1da7-4678-a568-be34cbdec141,Namespace:kube-system,Attempt:1,} returns sandbox id \"ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0\"" Dec 13 13:56:49.495682 kubelet[2068]: E1213 13:56:49.495659 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:49.499440 env[1220]: time="2024-12-13T13:56:49.499377358Z" level=info msg="CreateContainer within sandbox \"ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.499000 audit: BPF prog-id=189 op=LOAD Dec 13 13:56:49.500000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.500000 audit[4290]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4275 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231616639313363353333323637616335346137666636376532633135 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4275 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231616639313363353333323637616335346137666636376532633135 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.501000 audit: BPF prog-id=190 op=LOAD Dec 13 13:56:49.501000 audit[4290]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4275 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231616639313363353333323637616335346137666636376532633135 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.502000 audit: BPF prog-id=191 op=LOAD Dec 13 13:56:49.502000 audit[4290]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4275 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231616639313363353333323637616335346137666636376532633135 Dec 13 13:56:49.502000 audit: BPF prog-id=191 op=UNLOAD Dec 13 13:56:49.502000 audit: BPF prog-id=190 op=UNLOAD Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { perfmon } for pid=4290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit[4290]: AVC avc: denied { bpf } for pid=4290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.503000 audit: BPF prog-id=192 op=LOAD Dec 13 13:56:49.503000 audit[4290]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4275 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231616639313363353333323637616335346137666636376532633135 Dec 13 13:56:49.505780 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Dec 13 13:56:49.519732 env[1220]: time="2024-12-13T13:56:49.519681533Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nk6d6,Uid:9baa3386-bb08-4023-b9a1-0a8007c16bf7,Namespace:calico-system,Attempt:1,} returns sandbox id \"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d\"" Dec 13 13:56:49.532470 env[1220]: time="2024-12-13T13:56:49.532417424Z" level=info msg="CreateContainer within sandbox \"ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6dfbbded3d266c9a35c0adda905e48b08a453df162e4ec9ee3e42cd956ffe7f9\"" Dec 13 13:56:49.532897 env[1220]: time="2024-12-13T13:56:49.532867565Z" level=info msg="StartContainer for \"6dfbbded3d266c9a35c0adda905e48b08a453df162e4ec9ee3e42cd956ffe7f9\"" Dec 13 13:56:49.545772 systemd[1]: Started cri-containerd-6dfbbded3d266c9a35c0adda905e48b08a453df162e4ec9ee3e42cd956ffe7f9.scope. Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.566000 audit: BPF prog-id=193 op=LOAD Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4233 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664666262646564336432363663396133356330616464613930356534 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4233 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664666262646564336432363663396133356330616464613930356534 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit: BPF prog-id=194 op=LOAD Dec 13 13:56:49.567000 audit[4324]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4233 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664666262646564336432363663396133356330616464613930356534 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit: BPF prog-id=195 op=LOAD Dec 13 13:56:49.567000 audit[4324]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4233 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664666262646564336432363663396133356330616464613930356534 Dec 13 13:56:49.567000 audit: BPF prog-id=195 op=UNLOAD Dec 13 13:56:49.567000 audit: BPF prog-id=194 op=UNLOAD Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { perfmon } for pid=4324 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit[4324]: AVC avc: denied { bpf } for pid=4324 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:49.567000 audit: BPF prog-id=196 op=LOAD Dec 13 13:56:49.567000 audit[4324]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4233 pid=4324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:49.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664666262646564336432363663396133356330616464613930356534 Dec 13 13:56:49.587428 env[1220]: time="2024-12-13T13:56:49.587385542Z" level=info msg="StartContainer for \"6dfbbded3d266c9a35c0adda905e48b08a453df162e4ec9ee3e42cd956ffe7f9\" returns successfully" Dec 13 13:56:50.033149 env[1220]: time="2024-12-13T13:56:50.033108949Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.034938 env[1220]: time="2024-12-13T13:56:50.034906674Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.036237 env[1220]: time="2024-12-13T13:56:50.036211376Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.037868 env[1220]: time="2024-12-13T13:56:50.037842052Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.038352 env[1220]: time="2024-12-13T13:56:50.038327195Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c\"" Dec 13 13:56:50.040070 env[1220]: time="2024-12-13T13:56:50.040033196Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Dec 13 13:56:50.041897 env[1220]: time="2024-12-13T13:56:50.041863522Z" level=info msg="CreateContainer within sandbox \"c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Dec 13 13:56:50.051878 env[1220]: time="2024-12-13T13:56:50.051841072Z" level=info msg="CreateContainer within sandbox \"c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c6915c72735337f19086f351d5fbea20ba252e3f72251a66d6404e8290cbf3c4\"" Dec 13 13:56:50.053322 env[1220]: time="2024-12-13T13:56:50.053291981Z" level=info msg="StartContainer for \"c6915c72735337f19086f351d5fbea20ba252e3f72251a66d6404e8290cbf3c4\"" Dec 13 13:56:50.066578 systemd[1]: Started cri-containerd-c6915c72735337f19086f351d5fbea20ba252e3f72251a66d6404e8290cbf3c4.scope. Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.093000 audit: BPF prog-id=197 op=LOAD Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3803 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336393135633732373335333337663139303836663335316435666265 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3803 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336393135633732373335333337663139303836663335316435666265 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit: BPF prog-id=198 op=LOAD Dec 13 13:56:50.094000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3803 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336393135633732373335333337663139303836663335316435666265 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit: BPF prog-id=199 op=LOAD Dec 13 13:56:50.094000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3803 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336393135633732373335333337663139303836663335316435666265 Dec 13 13:56:50.094000 audit: BPF prog-id=199 op=UNLOAD Dec 13 13:56:50.094000 audit: BPF prog-id=198 op=UNLOAD Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.094000 audit: BPF prog-id=200 op=LOAD Dec 13 13:56:50.094000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3803 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336393135633732373335333337663139303836663335316435666265 Dec 13 13:56:50.117584 env[1220]: time="2024-12-13T13:56:50.115472351Z" level=info msg="StartContainer for \"c6915c72735337f19086f351d5fbea20ba252e3f72251a66d6404e8290cbf3c4\" returns successfully" Dec 13 13:56:50.160185 kubelet[2068]: E1213 13:56:50.160075 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:50.160185 kubelet[2068]: E1213 13:56:50.160085 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:50.181004 kubelet[2068]: I1213 13:56:50.180940 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-76d586d7df-w7lzs" podStartSLOduration=22.721388344 podStartE2EDuration="25.180923476s" podCreationTimestamp="2024-12-13 13:56:25 +0000 UTC" firstStartedPulling="2024-12-13 13:56:47.579742948 +0000 UTC m=+45.649072419" lastFinishedPulling="2024-12-13 13:56:50.03927804 +0000 UTC m=+48.108607551" observedRunningTime="2024-12-13 13:56:50.170747156 +0000 UTC m=+48.240076907" watchObservedRunningTime="2024-12-13 13:56:50.180923476 +0000 UTC m=+48.250252987" Dec 13 13:56:50.186000 audit[4395]: NETFILTER_CFG table=filter:109 family=2 entries=10 op=nft_register_rule pid=4395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:50.186000 audit[4395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=fffffdde6e80 a2=0 a3=1 items=0 ppid=2264 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.186000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:50.190000 audit[4395]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=4395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:50.190000 audit[4395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffffdde6e80 a2=0 a3=1 items=0 ppid=2264 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:50.212000 audit[4399]: NETFILTER_CFG table=filter:111 family=2 entries=10 op=nft_register_rule pid=4399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:50.212000 audit[4399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffdc54d600 a2=0 a3=1 items=0 ppid=2264 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.212000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:50.220000 audit[4399]: NETFILTER_CFG table=nat:112 family=2 entries=44 op=nft_register_rule pid=4399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:50.220000 audit[4399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffdc54d600 a2=0 a3=1 items=0 ppid=2264 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.220000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:50.315206 env[1220]: time="2024-12-13T13:56:50.315112680Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.317054 env[1220]: time="2024-12-13T13:56:50.317019410Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.318398 env[1220]: time="2024-12-13T13:56:50.318340152Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.321091 env[1220]: time="2024-12-13T13:56:50.321064440Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:50.321542 env[1220]: time="2024-12-13T13:56:50.321515461Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c\"" Dec 13 13:56:50.323805 env[1220]: time="2024-12-13T13:56:50.323784568Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\"" Dec 13 13:56:50.324023 env[1220]: time="2024-12-13T13:56:50.323783248Z" level=info msg="CreateContainer within sandbox \"608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Dec 13 13:56:50.336107 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4034966796.mount: Deactivated successfully. Dec 13 13:56:50.340857 env[1220]: time="2024-12-13T13:56:50.340819811Z" level=info msg="CreateContainer within sandbox \"608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"53bc0659cae6aee6096504e86bc681a3cc1e11e0cf65e6a3c109da6286cb3f69\"" Dec 13 13:56:50.342398 env[1220]: time="2024-12-13T13:56:50.342331923Z" level=info msg="StartContainer for \"53bc0659cae6aee6096504e86bc681a3cc1e11e0cf65e6a3c109da6286cb3f69\"" Dec 13 13:56:50.360699 systemd[1]: Started cri-containerd-53bc0659cae6aee6096504e86bc681a3cc1e11e0cf65e6a3c109da6286cb3f69.scope. Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.401000 audit: BPF prog-id=201 op=LOAD Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4065 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626330363539636165366165653630393635303465383662633638 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4065 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626330363539636165366165653630393635303465383662633638 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit: BPF prog-id=202 op=LOAD Dec 13 13:56:50.402000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4065 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626330363539636165366165653630393635303465383662633638 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit: BPF prog-id=203 op=LOAD Dec 13 13:56:50.402000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4065 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626330363539636165366165653630393635303465383662633638 Dec 13 13:56:50.402000 audit: BPF prog-id=203 op=UNLOAD Dec 13 13:56:50.402000 audit: BPF prog-id=202 op=UNLOAD Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { perfmon } for pid=4408 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit[4408]: AVC avc: denied { bpf } for pid=4408 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:50.402000 audit: BPF prog-id=204 op=LOAD Dec 13 13:56:50.402000 audit[4408]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4065 pid=4408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:50.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533626330363539636165366165653630393635303465383662633638 Dec 13 13:56:50.445470 systemd-networkd[1055]: cali6548b26db62: Gained IPv6LL Dec 13 13:56:50.458445 env[1220]: time="2024-12-13T13:56:50.458401353Z" level=info msg="StartContainer for \"53bc0659cae6aee6096504e86bc681a3cc1e11e0cf65e6a3c109da6286cb3f69\" returns successfully" Dec 13 13:56:50.829475 systemd-networkd[1055]: cali303d3009d5e: Gained IPv6LL Dec 13 13:56:51.163509 kubelet[2068]: E1213 13:56:51.163035 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:51.174469 kubelet[2068]: I1213 13:56:51.173984 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-dxkkw" podStartSLOduration=33.173970054 podStartE2EDuration="33.173970054s" podCreationTimestamp="2024-12-13 13:56:18 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-12-13 13:56:50.181890601 +0000 UTC m=+48.251220192" watchObservedRunningTime="2024-12-13 13:56:51.173970054 +0000 UTC m=+49.243299565" Dec 13 13:56:51.174469 kubelet[2068]: I1213 13:56:51.174244 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-76d586d7df-89t4v" podStartSLOduration=24.182857693 podStartE2EDuration="26.174239786s" podCreationTimestamp="2024-12-13 13:56:25 +0000 UTC" firstStartedPulling="2024-12-13 13:56:48.331078293 +0000 UTC m=+46.400407804" lastFinishedPulling="2024-12-13 13:56:50.322460426 +0000 UTC m=+48.391789897" observedRunningTime="2024-12-13 13:56:51.173517233 +0000 UTC m=+49.242846744" watchObservedRunningTime="2024-12-13 13:56:51.174239786 +0000 UTC m=+49.243569297" Dec 13 13:56:51.203000 audit[4440]: NETFILTER_CFG table=filter:113 family=2 entries=10 op=nft_register_rule pid=4440 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:51.203000 audit[4440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffc6a7c760 a2=0 a3=1 items=0 ppid=2264 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:51.203000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:51.211000 audit[4440]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4440 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:51.211000 audit[4440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc6a7c760 a2=0 a3=1 items=0 ppid=2264 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:51.211000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:51.275000 audit[4419]: AVC avc: denied { watch } for pid=4419 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_13_56_33.378717157/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c210,c267 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c210,c267 tclass=file permissive=0 Dec 13 13:56:51.275000 audit[4419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000351d40 a2=fc6 a3=0 items=0 ppid=4065 pid=4419 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c210,c267 key=(null) Dec 13 13:56:51.275000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 13:56:51.374965 env[1220]: time="2024-12-13T13:56:51.374919640Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:51.376390 env[1220]: time="2024-12-13T13:56:51.376341265Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3c11734f3001b7070e7e2b5e64938f89891cf8c44f8997e86aa23c5d5bf70163,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:51.377825 env[1220]: time="2024-12-13T13:56:51.377787412Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:51.379248 env[1220]: time="2024-12-13T13:56:51.379216839Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:eaa7e01fb16b603c155a67b81f16992281db7f831684c7b2081d3434587a7ff3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:51.379752 env[1220]: time="2024-12-13T13:56:51.379721142Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\" returns image reference \"sha256:3c11734f3001b7070e7e2b5e64938f89891cf8c44f8997e86aa23c5d5bf70163\"" Dec 13 13:56:51.381955 env[1220]: time="2024-12-13T13:56:51.381925364Z" level=info msg="CreateContainer within sandbox \"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Dec 13 13:56:51.397098 env[1220]: time="2024-12-13T13:56:51.397057025Z" level=info msg="CreateContainer within sandbox \"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"868396925183f1e5f261d78b1f8a733a4fdf01b04b36882a69e8362124b125f4\"" Dec 13 13:56:51.398676 env[1220]: time="2024-12-13T13:56:51.397669173Z" level=info msg="StartContainer for \"868396925183f1e5f261d78b1f8a733a4fdf01b04b36882a69e8362124b125f4\"" Dec 13 13:56:51.423684 systemd[1]: Started cri-containerd-868396925183f1e5f261d78b1f8a733a4fdf01b04b36882a69e8362124b125f4.scope. Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4275 pid=4448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:51.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836383339363932353138336631653566323631643738623166386137 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit: BPF prog-id=205 op=LOAD Dec 13 13:56:51.452000 audit[4448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4275 pid=4448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:51.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836383339363932353138336631653566323631643738623166386137 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit: BPF prog-id=206 op=LOAD Dec 13 13:56:51.452000 audit[4448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4275 pid=4448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:51.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836383339363932353138336631653566323631643738623166386137 Dec 13 13:56:51.452000 audit: BPF prog-id=206 op=UNLOAD Dec 13 13:56:51.452000 audit: BPF prog-id=205 op=UNLOAD Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { perfmon } for pid=4448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit[4448]: AVC avc: denied { bpf } for pid=4448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:51.452000 audit: BPF prog-id=207 op=LOAD Dec 13 13:56:51.452000 audit[4448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4275 pid=4448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:51.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836383339363932353138336631653566323631643738623166386137 Dec 13 13:56:51.474243 env[1220]: time="2024-12-13T13:56:51.474199677Z" level=info msg="StartContainer for \"868396925183f1e5f261d78b1f8a733a4fdf01b04b36882a69e8362124b125f4\" returns successfully" Dec 13 13:56:51.475493 env[1220]: time="2024-12-13T13:56:51.475461656Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\"" Dec 13 13:56:51.486000 audit[4375]: AVC avc: denied { watch } for pid=4375 comm="apiserver" path="/calico-apiserver-certs/..2024_12_13_13_56_33.1074565139/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c880 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c317,c880 tclass=file permissive=0 Dec 13 13:56:51.486000 audit[4375]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007780a0 a2=fc6 a3=0 items=0 ppid=3803 pid=4375 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c880 key=(null) Dec 13 13:56:51.486000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Dec 13 13:56:52.168410 kubelet[2068]: I1213 13:56:52.168372 2068 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Dec 13 13:56:52.169312 kubelet[2068]: E1213 13:56:52.169054 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:52.229011 kernel: kauditd_printk_skb: 659 callbacks suppressed Dec 13 13:56:52.229151 kernel: audit: type=1325 audit(1734098212.225:1399): table=filter:115 family=2 entries=9 op=nft_register_rule pid=4483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:52.225000 audit[4483]: NETFILTER_CFG table=filter:115 family=2 entries=9 op=nft_register_rule pid=4483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:52.225000 audit[4483]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffe043e470 a2=0 a3=1 items=0 ppid=2264 pid=4483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.233237 kernel: audit: type=1300 audit(1734098212.225:1399): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffe043e470 a2=0 a3=1 items=0 ppid=2264 pid=4483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.233292 kernel: audit: type=1327 audit(1734098212.225:1399): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:52.225000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:52.243000 audit[4483]: NETFILTER_CFG table=nat:116 family=2 entries=63 op=nft_register_chain pid=4483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:52.243000 audit[4483]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23436 a0=3 a1=ffffe043e470 a2=0 a3=1 items=0 ppid=2264 pid=4483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.250465 kernel: audit: type=1325 audit(1734098212.243:1400): table=nat:116 family=2 entries=63 op=nft_register_chain pid=4483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:52.250518 kernel: audit: type=1300 audit(1734098212.243:1400): arch=c00000b7 syscall=211 success=yes exit=23436 a0=3 a1=ffffe043e470 a2=0 a3=1 items=0 ppid=2264 pid=4483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.250547 kernel: audit: type=1327 audit(1734098212.243:1400): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:52.243000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:52.421863 systemd[1]: Started sshd@13-10.0.0.14:22-10.0.0.1:40166.service. Dec 13 13:56:52.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.14:22-10.0.0.1:40166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:52.426415 kernel: audit: type=1130 audit(1734098212.421:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.14:22-10.0.0.1:40166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:52.474000 audit[4486]: USER_ACCT pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.474695 sshd[4486]: Accepted publickey for core from 10.0.0.1 port 40166 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:52.475000 audit[4486]: CRED_ACQ pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.479065 sshd[4486]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:52.482627 kernel: audit: type=1101 audit(1734098212.474:1402): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.482707 kernel: audit: type=1103 audit(1734098212.475:1403): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.485170 kernel: audit: type=1006 audit(1734098212.475:1404): pid=4486 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Dec 13 13:56:52.475000 audit[4486]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf8e7b00 a2=3 a3=1 items=0 ppid=1 pid=4486 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.475000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:52.488044 systemd-logind[1209]: New session 14 of user core. Dec 13 13:56:52.488866 systemd[1]: Started session-14.scope. Dec 13 13:56:52.499000 audit[4486]: USER_START pid=4486 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.501000 audit[4488]: CRED_ACQ pid=4488 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.728650 sshd[4486]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:52.729000 audit[4486]: USER_END pid=4486 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.729000 audit[4486]: CRED_DISP pid=4486 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:52.731387 systemd[1]: session-14.scope: Deactivated successfully. Dec 13 13:56:52.731918 systemd-logind[1209]: Session 14 logged out. Waiting for processes to exit. Dec 13 13:56:52.732065 systemd[1]: sshd@13-10.0.0.14:22-10.0.0.1:40166.service: Deactivated successfully. Dec 13 13:56:52.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.14:22-10.0.0.1:40166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:52.733624 systemd-logind[1209]: Removed session 14. Dec 13 13:56:52.756321 env[1220]: time="2024-12-13T13:56:52.756278988Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:52.758043 env[1220]: time="2024-12-13T13:56:52.757999307Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3eb557f7694f230afd24a75a691bcda4c0a7bfe87a981386dcd4ecf2b0701349,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:52.759893 env[1220]: time="2024-12-13T13:56:52.759864952Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:52.761619 env[1220]: time="2024-12-13T13:56:52.761590990Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:a338da9488cbaa83c78457c3d7354d84149969c0480e88dd768e036632ff5b76,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Dec 13 13:56:52.762037 env[1220]: time="2024-12-13T13:56:52.762005369Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\" returns image reference \"sha256:3eb557f7694f230afd24a75a691bcda4c0a7bfe87a981386dcd4ecf2b0701349\"" Dec 13 13:56:52.765680 env[1220]: time="2024-12-13T13:56:52.765646735Z" level=info msg="CreateContainer within sandbox \"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Dec 13 13:56:52.784632 env[1220]: time="2024-12-13T13:56:52.784570077Z" level=info msg="CreateContainer within sandbox \"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"918b7499ce0e69aa84335b9163131945682b90b5419bb23fcf1ced8a1c08f5d0\"" Dec 13 13:56:52.785217 env[1220]: time="2024-12-13T13:56:52.785157104Z" level=info msg="StartContainer for \"918b7499ce0e69aa84335b9163131945682b90b5419bb23fcf1ced8a1c08f5d0\"" Dec 13 13:56:52.805978 systemd[1]: Started cri-containerd-918b7499ce0e69aa84335b9163131945682b90b5419bb23fcf1ced8a1c08f5d0.scope. Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4275 pid=4506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931386237343939636530653639616138343333356239313633313331 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit: BPF prog-id=208 op=LOAD Dec 13 13:56:52.832000 audit[4506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4275 pid=4506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931386237343939636530653639616138343333356239313633313331 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.832000 audit: BPF prog-id=209 op=LOAD Dec 13 13:56:52.832000 audit[4506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4275 pid=4506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931386237343939636530653639616138343333356239313633313331 Dec 13 13:56:52.833000 audit: BPF prog-id=209 op=UNLOAD Dec 13 13:56:52.833000 audit: BPF prog-id=208 op=UNLOAD Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { perfmon } for pid=4506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit[4506]: AVC avc: denied { bpf } for pid=4506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Dec 13 13:56:52.833000 audit: BPF prog-id=210 op=LOAD Dec 13 13:56:52.833000 audit[4506]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4275 pid=4506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:52.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931386237343939636530653639616138343333356239313633313331 Dec 13 13:56:52.852980 env[1220]: time="2024-12-13T13:56:52.852935870Z" level=info msg="StartContainer for \"918b7499ce0e69aa84335b9163131945682b90b5419bb23fcf1ced8a1c08f5d0\" returns successfully" Dec 13 13:56:53.080071 kubelet[2068]: I1213 13:56:53.079955 2068 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Dec 13 13:56:53.082883 kubelet[2068]: I1213 13:56:53.082856 2068 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Dec 13 13:56:53.173260 kubelet[2068]: E1213 13:56:53.173227 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:56:53.268000 audit[4539]: NETFILTER_CFG table=filter:117 family=2 entries=8 op=nft_register_rule pid=4539 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:53.268000 audit[4539]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffcc5996c0 a2=0 a3=1 items=0 ppid=2264 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:53.268000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:53.275000 audit[4539]: NETFILTER_CFG table=nat:118 family=2 entries=34 op=nft_register_chain pid=4539 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:56:53.275000 audit[4539]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffcc5996c0 a2=0 a3=1 items=0 ppid=2264 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:53.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:56:57.733985 systemd[1]: Started sshd@14-10.0.0.14:22-10.0.0.1:55120.service. Dec 13 13:56:57.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.14:22-10.0.0.1:55120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:57.735054 kernel: kauditd_printk_skb: 56 callbacks suppressed Dec 13 13:56:57.735110 kernel: audit: type=1130 audit(1734098217.733:1418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.14:22-10.0.0.1:55120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:57.782000 audit[4544]: USER_ACCT pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.782913 sshd[4544]: Accepted publickey for core from 10.0.0.1 port 55120 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:56:57.784660 sshd[4544]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:56:57.782000 audit[4544]: CRED_ACQ pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.789647 kernel: audit: type=1101 audit(1734098217.782:1419): pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.789723 kernel: audit: type=1103 audit(1734098217.782:1420): pid=4544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.789747 kernel: audit: type=1006 audit(1734098217.782:1421): pid=4544 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Dec 13 13:56:57.782000 audit[4544]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd374fff0 a2=3 a3=1 items=0 ppid=1 pid=4544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:57.795758 kernel: audit: type=1300 audit(1734098217.782:1421): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd374fff0 a2=3 a3=1 items=0 ppid=1 pid=4544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:56:57.782000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:57.797165 kernel: audit: type=1327 audit(1734098217.782:1421): proctitle=737368643A20636F7265205B707269765D Dec 13 13:56:57.800009 systemd-logind[1209]: New session 15 of user core. Dec 13 13:56:57.800855 systemd[1]: Started session-15.scope. Dec 13 13:56:57.811000 audit[4544]: USER_START pid=4544 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.812000 audit[4546]: CRED_ACQ pid=4546 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.818710 kernel: audit: type=1105 audit(1734098217.811:1422): pid=4544 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.818773 kernel: audit: type=1103 audit(1734098217.812:1423): pid=4546 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.963822 sshd[4544]: pam_unix(sshd:session): session closed for user core Dec 13 13:56:57.963000 audit[4544]: USER_END pid=4544 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.966607 systemd[1]: sshd@14-10.0.0.14:22-10.0.0.1:55120.service: Deactivated successfully. Dec 13 13:56:57.967421 systemd[1]: session-15.scope: Deactivated successfully. Dec 13 13:56:57.963000 audit[4544]: CRED_DISP pid=4544 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.971848 kernel: audit: type=1106 audit(1734098217.963:1424): pid=4544 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.971931 kernel: audit: type=1104 audit(1734098217.963:1425): pid=4544 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:56:57.963000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.14:22-10.0.0.1:55120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:56:57.972071 systemd-logind[1209]: Session 15 logged out. Waiting for processes to exit. Dec 13 13:56:57.972824 systemd-logind[1209]: Removed session 15. Dec 13 13:56:59.023000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.023000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.023000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400106fe00 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:59.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:59.023000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400241ca20 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:56:59.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:56:59.312000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.312000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4010414220 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:56:59.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:56:59.312000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.312000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=40114de2d0 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:56:59.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:56:59.312000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.312000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=40110fdce0 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:56:59.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:56:59.314000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.314000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4010e8d470 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:56:59.314000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.314000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:56:59.314000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=400fcd9e00 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:56:59.314000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:56:59.323000 audit[1946]: AVC avc: denied { watch } for pid=1946 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:56:59.323000 audit[1946]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=77 a1=4010e8d4d0 a2=fc6 a3=0 items=0 ppid=1781 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c364,c651 key=(null) Dec 13 13:56:59.323000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3134002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Dec 13 13:57:01.994585 env[1220]: time="2024-12-13T13:57:01.994536794Z" level=info msg="StopPodSandbox for \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\"" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.039 [WARNING][4573] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--9g529-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"59cb5242-a560-4729-b88e-546b5ca59812", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa", Pod:"coredns-7db6d8ff4d-9g529", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali786208dee5d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.039 [INFO][4573] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.039 [INFO][4573] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" iface="eth0" netns="" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.039 [INFO][4573] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.039 [INFO][4573] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.065 [INFO][4587] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.065 [INFO][4587] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.066 [INFO][4587] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.075 [WARNING][4587] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.075 [INFO][4587] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.076 [INFO][4587] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.080054 env[1220]: 2024-12-13 13:57:02.078 [INFO][4573] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.080546 env[1220]: time="2024-12-13T13:57:02.080054263Z" level=info msg="TearDown network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\" successfully" Dec 13 13:57:02.080546 env[1220]: time="2024-12-13T13:57:02.080083184Z" level=info msg="StopPodSandbox for \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\" returns successfully" Dec 13 13:57:02.080870 env[1220]: time="2024-12-13T13:57:02.080812493Z" level=info msg="RemovePodSandbox for \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\"" Dec 13 13:57:02.080933 env[1220]: time="2024-12-13T13:57:02.080871375Z" level=info msg="Forcibly stopping sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\"" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.124 [WARNING][4612] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--9g529-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"59cb5242-a560-4729-b88e-546b5ca59812", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f143ece318264b889c44329a6e22973008cc53f89934534a868d9b3e2c91eefa", Pod:"coredns-7db6d8ff4d-9g529", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali786208dee5d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.124 [INFO][4612] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.124 [INFO][4612] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" iface="eth0" netns="" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.124 [INFO][4612] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.125 [INFO][4612] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.159 [INFO][4620] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.159 [INFO][4620] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.159 [INFO][4620] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.172 [WARNING][4620] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.172 [INFO][4620] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" HandleID="k8s-pod-network.4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Workload="localhost-k8s-coredns--7db6d8ff4d--9g529-eth0" Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.174 [INFO][4620] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.182245 env[1220]: 2024-12-13 13:57:02.179 [INFO][4612] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4" Dec 13 13:57:02.182731 env[1220]: time="2024-12-13T13:57:02.182268798Z" level=info msg="TearDown network for sandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\" successfully" Dec 13 13:57:02.188475 env[1220]: time="2024-12-13T13:57:02.188433205Z" level=info msg="RemovePodSandbox \"4ee8462b6c531b807fd486357e5d9462b467c3e1a83a3dbc975d744f1fac90f4\" returns successfully" Dec 13 13:57:02.188857 env[1220]: time="2024-12-13T13:57:02.188822300Z" level=info msg="StopPodSandbox for \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\"" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.224 [WARNING][4648] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nk6d6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9baa3386-bb08-4023-b9a1-0a8007c16bf7", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d", Pod:"csi-node-driver-nk6d6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali303d3009d5e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.225 [INFO][4648] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.225 [INFO][4648] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" iface="eth0" netns="" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.225 [INFO][4648] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.225 [INFO][4648] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.243 [INFO][4656] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.243 [INFO][4656] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.243 [INFO][4656] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.251 [WARNING][4656] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.251 [INFO][4656] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.252 [INFO][4656] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.256214 env[1220]: 2024-12-13 13:57:02.254 [INFO][4648] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.256214 env[1220]: time="2024-12-13T13:57:02.256184479Z" level=info msg="TearDown network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\" successfully" Dec 13 13:57:02.256667 env[1220]: time="2024-12-13T13:57:02.256218240Z" level=info msg="StopPodSandbox for \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\" returns successfully" Dec 13 13:57:02.258085 env[1220]: time="2024-12-13T13:57:02.258054754Z" level=info msg="RemovePodSandbox for \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\"" Dec 13 13:57:02.258148 env[1220]: time="2024-12-13T13:57:02.258110156Z" level=info msg="Forcibly stopping sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\"" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.290 [WARNING][4679] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--nk6d6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"9baa3386-bb08-4023-b9a1-0a8007c16bf7", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"65bf684474", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b1af913c533267ac54a7ff67e2c150c472ad007a82902222387c77f600365e1d", Pod:"csi-node-driver-nk6d6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali303d3009d5e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.291 [INFO][4679] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.291 [INFO][4679] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" iface="eth0" netns="" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.291 [INFO][4679] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.291 [INFO][4679] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.309 [INFO][4686] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.309 [INFO][4686] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.309 [INFO][4686] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.318 [WARNING][4686] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.318 [INFO][4686] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" HandleID="k8s-pod-network.8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Workload="localhost-k8s-csi--node--driver--nk6d6-eth0" Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.319 [INFO][4686] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.324844 env[1220]: 2024-12-13 13:57:02.321 [INFO][4679] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00" Dec 13 13:57:02.325333 env[1220]: time="2024-12-13T13:57:02.324855830Z" level=info msg="TearDown network for sandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\" successfully" Dec 13 13:57:02.327814 env[1220]: time="2024-12-13T13:57:02.327779987Z" level=info msg="RemovePodSandbox \"8a4a15a29867dde1d71369c7483a2743c8f4b70d351b715e1914ad7ec3039c00\" returns successfully" Dec 13 13:57:02.328251 env[1220]: time="2024-12-13T13:57:02.328229485Z" level=info msg="StopPodSandbox for \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\"" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.363 [WARNING][4708] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"52ebe7ce-d5af-4651-afd2-0f235a5e223f", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae", Pod:"calico-apiserver-76d586d7df-89t4v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali91b63816a51", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.364 [INFO][4708] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.364 [INFO][4708] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" iface="eth0" netns="" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.364 [INFO][4708] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.364 [INFO][4708] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.383 [INFO][4715] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.384 [INFO][4715] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.384 [INFO][4715] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.392 [WARNING][4715] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.392 [INFO][4715] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.394 [INFO][4715] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.397649 env[1220]: 2024-12-13 13:57:02.396 [INFO][4708] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.398080 env[1220]: time="2024-12-13T13:57:02.397670067Z" level=info msg="TearDown network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\" successfully" Dec 13 13:57:02.398080 env[1220]: time="2024-12-13T13:57:02.397699869Z" level=info msg="StopPodSandbox for \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\" returns successfully" Dec 13 13:57:02.398319 env[1220]: time="2024-12-13T13:57:02.398287372Z" level=info msg="RemovePodSandbox for \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\"" Dec 13 13:57:02.398480 env[1220]: time="2024-12-13T13:57:02.398438378Z" level=info msg="Forcibly stopping sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\"" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.432 [WARNING][4738] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"52ebe7ce-d5af-4651-afd2-0f235a5e223f", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"608231bc4067208a15c392886f1ba05833c7cd63ce75bc20971947f81d977bae", Pod:"calico-apiserver-76d586d7df-89t4v", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali91b63816a51", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.433 [INFO][4738] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.433 [INFO][4738] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" iface="eth0" netns="" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.433 [INFO][4738] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.433 [INFO][4738] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.453 [INFO][4746] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.453 [INFO][4746] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.453 [INFO][4746] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.461 [WARNING][4746] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.461 [INFO][4746] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" HandleID="k8s-pod-network.f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Workload="localhost-k8s-calico--apiserver--76d586d7df--89t4v-eth0" Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.463 [INFO][4746] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.466801 env[1220]: 2024-12-13 13:57:02.465 [INFO][4738] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8" Dec 13 13:57:02.467237 env[1220]: time="2024-12-13T13:57:02.466830958Z" level=info msg="TearDown network for sandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\" successfully" Dec 13 13:57:02.469650 env[1220]: time="2024-12-13T13:57:02.469608349Z" level=info msg="RemovePodSandbox \"f807118646bf0cc63255f18b1267e37b3146e100a885493a7b2753a67afabeb8\" returns successfully" Dec 13 13:57:02.470121 env[1220]: time="2024-12-13T13:57:02.470087209Z" level=info msg="StopPodSandbox for \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\"" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.505 [WARNING][4768] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"1403eb84-919f-4a7b-b1bb-3b5e0678848f", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e", Pod:"calico-apiserver-76d586d7df-w7lzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9185216b938", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.506 [INFO][4768] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.506 [INFO][4768] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" iface="eth0" netns="" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.506 [INFO][4768] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.506 [INFO][4768] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.526 [INFO][4776] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.526 [INFO][4776] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.526 [INFO][4776] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.534 [WARNING][4776] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.534 [INFO][4776] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.535 [INFO][4776] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.539023 env[1220]: 2024-12-13 13:57:02.537 [INFO][4768] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.539023 env[1220]: time="2024-12-13T13:57:02.538998489Z" level=info msg="TearDown network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\" successfully" Dec 13 13:57:02.539646 env[1220]: time="2024-12-13T13:57:02.539029291Z" level=info msg="StopPodSandbox for \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\" returns successfully" Dec 13 13:57:02.540862 env[1220]: time="2024-12-13T13:57:02.540833483Z" level=info msg="RemovePodSandbox for \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\"" Dec 13 13:57:02.540993 env[1220]: time="2024-12-13T13:57:02.540953968Z" level=info msg="Forcibly stopping sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\"" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.575 [WARNING][4800] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0", GenerateName:"calico-apiserver-76d586d7df-", Namespace:"calico-apiserver", SelfLink:"", UID:"1403eb84-919f-4a7b-b1bb-3b5e0678848f", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"76d586d7df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c56a0db50376a276d12bd551c0f233d1acbd48f972ea3421ed35041b3538530e", Pod:"calico-apiserver-76d586d7df-w7lzs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9185216b938", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.575 [INFO][4800] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.575 [INFO][4800] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" iface="eth0" netns="" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.575 [INFO][4800] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.575 [INFO][4800] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.595 [INFO][4807] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.596 [INFO][4807] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.596 [INFO][4807] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.604 [WARNING][4807] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.604 [INFO][4807] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" HandleID="k8s-pod-network.89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Workload="localhost-k8s-calico--apiserver--76d586d7df--w7lzs-eth0" Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.605 [INFO][4807] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.609239 env[1220]: 2024-12-13 13:57:02.607 [INFO][4800] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf" Dec 13 13:57:02.609708 env[1220]: time="2024-12-13T13:57:02.609268105Z" level=info msg="TearDown network for sandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\" successfully" Dec 13 13:57:02.612075 env[1220]: time="2024-12-13T13:57:02.612036456Z" level=info msg="RemovePodSandbox \"89f8a6a9ae630b59ac5cec8158a587fa98723811a3f7ea8c317d4aaf4f7479cf\" returns successfully" Dec 13 13:57:02.612579 env[1220]: time="2024-12-13T13:57:02.612539236Z" level=info msg="StopPodSandbox for \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\"" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.646 [WARNING][4830] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"c5db530d-1da7-4678-a568-be34cbdec141", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0", Pod:"coredns-7db6d8ff4d-dxkkw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6548b26db62", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.647 [INFO][4830] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.647 [INFO][4830] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" iface="eth0" netns="" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.647 [INFO][4830] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.647 [INFO][4830] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.666 [INFO][4837] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.666 [INFO][4837] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.666 [INFO][4837] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.674 [WARNING][4837] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.674 [INFO][4837] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.676 [INFO][4837] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.679651 env[1220]: 2024-12-13 13:57:02.678 [INFO][4830] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.680139 env[1220]: time="2024-12-13T13:57:02.679682886Z" level=info msg="TearDown network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\" successfully" Dec 13 13:57:02.680139 env[1220]: time="2024-12-13T13:57:02.679714247Z" level=info msg="StopPodSandbox for \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\" returns successfully" Dec 13 13:57:02.680430 env[1220]: time="2024-12-13T13:57:02.680403835Z" level=info msg="RemovePodSandbox for \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\"" Dec 13 13:57:02.680571 env[1220]: time="2024-12-13T13:57:02.680516679Z" level=info msg="Forcibly stopping sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\"" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.717 [WARNING][4860] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"c5db530d-1da7-4678-a568-be34cbdec141", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ba1808e6999bbf659352ceecfc2f70a7f363bc7bfebead42e81ca01638598ff0", Pod:"coredns-7db6d8ff4d-dxkkw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6548b26db62", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.717 [INFO][4860] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.717 [INFO][4860] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" iface="eth0" netns="" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.717 [INFO][4860] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.717 [INFO][4860] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.737 [INFO][4868] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.737 [INFO][4868] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.737 [INFO][4868] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.745 [WARNING][4868] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.745 [INFO][4868] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" HandleID="k8s-pod-network.2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Workload="localhost-k8s-coredns--7db6d8ff4d--dxkkw-eth0" Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.747 [INFO][4868] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.750497 env[1220]: 2024-12-13 13:57:02.748 [INFO][4860] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a" Dec 13 13:57:02.750964 env[1220]: time="2024-12-13T13:57:02.750528804Z" level=info msg="TearDown network for sandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\" successfully" Dec 13 13:57:02.753432 env[1220]: time="2024-12-13T13:57:02.753395559Z" level=info msg="RemovePodSandbox \"2015cb81ddbe084930581f16d84ca53a521058bd556b8b840b7bfa4cfc3f9b9a\" returns successfully" Dec 13 13:57:02.753914 env[1220]: time="2024-12-13T13:57:02.753887219Z" level=info msg="StopPodSandbox for \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\"" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.787 [WARNING][4890] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0", GenerateName:"calico-kube-controllers-68f8464d77-", Namespace:"calico-system", SelfLink:"", UID:"d7c8a806-427f-4e3e-ba41-2613240195fa", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68f8464d77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95", Pod:"calico-kube-controllers-68f8464d77-4k4gb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0c4445f9649", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.788 [INFO][4890] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.788 [INFO][4890] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" iface="eth0" netns="" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.788 [INFO][4890] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.788 [INFO][4890] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.805 [INFO][4897] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.805 [INFO][4897] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.805 [INFO][4897] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.813 [WARNING][4897] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.813 [INFO][4897] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.814 [INFO][4897] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.818203 env[1220]: 2024-12-13 13:57:02.816 [INFO][4890] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.818730 env[1220]: time="2024-12-13T13:57:02.818693735Z" level=info msg="TearDown network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\" successfully" Dec 13 13:57:02.818794 env[1220]: time="2024-12-13T13:57:02.818777818Z" level=info msg="StopPodSandbox for \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\" returns successfully" Dec 13 13:57:02.820177 env[1220]: time="2024-12-13T13:57:02.820148233Z" level=info msg="RemovePodSandbox for \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\"" Dec 13 13:57:02.820253 env[1220]: time="2024-12-13T13:57:02.820185955Z" level=info msg="Forcibly stopping sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\"" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.852 [WARNING][4919] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0", GenerateName:"calico-kube-controllers-68f8464d77-", Namespace:"calico-system", SelfLink:"", UID:"d7c8a806-427f-4e3e-ba41-2613240195fa", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2024, time.December, 13, 13, 56, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"68f8464d77", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64434c26cd907bd589c572ab42efb7cd7219dd5d7e743c1bb2d55117cfabda95", Pod:"calico-kube-controllers-68f8464d77-4k4gb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0c4445f9649", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.852 [INFO][4919] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.852 [INFO][4919] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" iface="eth0" netns="" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.852 [INFO][4919] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.852 [INFO][4919] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.871 [INFO][4927] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.871 [INFO][4927] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.871 [INFO][4927] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.879 [WARNING][4927] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.879 [INFO][4927] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" HandleID="k8s-pod-network.79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Workload="localhost-k8s-calico--kube--controllers--68f8464d77--4k4gb-eth0" Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.880 [INFO][4927] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Dec 13 13:57:02.884429 env[1220]: 2024-12-13 13:57:02.882 [INFO][4919] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d" Dec 13 13:57:02.884864 env[1220]: time="2024-12-13T13:57:02.884464770Z" level=info msg="TearDown network for sandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\" successfully" Dec 13 13:57:02.887143 env[1220]: time="2024-12-13T13:57:02.887109796Z" level=info msg="RemovePodSandbox \"79faf1a748bae1ef58d7e3e329441d1461156c5a348c3591b34f6d7e1dcebf9d\" returns successfully" Dec 13 13:57:02.968591 systemd[1]: Started sshd@15-10.0.0.14:22-10.0.0.1:60866.service. Dec 13 13:57:02.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.14:22-10.0.0.1:60866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:02.969759 kernel: kauditd_printk_skb: 25 callbacks suppressed Dec 13 13:57:02.969806 kernel: audit: type=1130 audit(1734098222.967:1435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.14:22-10.0.0.1:60866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:03.014000 audit[4935]: USER_ACCT pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.015859 sshd[4935]: Accepted publickey for core from 10.0.0.1 port 60866 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:03.017449 sshd[4935]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:03.015000 audit[4935]: CRED_ACQ pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.022071 kernel: audit: type=1101 audit(1734098223.014:1436): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.022126 kernel: audit: type=1103 audit(1734098223.015:1437): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.022190 systemd[1]: Started session-16.scope. Dec 13 13:57:03.022508 systemd-logind[1209]: New session 16 of user core. Dec 13 13:57:03.024217 kernel: audit: type=1006 audit(1734098223.015:1438): pid=4935 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Dec 13 13:57:03.024265 kernel: audit: type=1300 audit(1734098223.015:1438): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde87f0f0 a2=3 a3=1 items=0 ppid=1 pid=4935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:03.015000 audit[4935]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde87f0f0 a2=3 a3=1 items=0 ppid=1 pid=4935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:03.015000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:03.028758 kernel: audit: type=1327 audit(1734098223.015:1438): proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:03.028813 kernel: audit: type=1105 audit(1734098223.025:1439): pid=4935 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.025000 audit[4935]: USER_START pid=4935 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.032402 kernel: audit: type=1103 audit(1734098223.026:1440): pid=4937 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.026000 audit[4937]: CRED_ACQ pid=4937 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.159857 sshd[4935]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:03.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.14:22-10.0.0.1:60876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:03.163810 systemd[1]: Started sshd@16-10.0.0.14:22-10.0.0.1:60876.service. Dec 13 13:57:03.167385 kernel: audit: type=1130 audit(1734098223.162:1441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.14:22-10.0.0.1:60876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:03.167000 audit[4935]: USER_END pid=4935 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.169923 systemd[1]: session-16.scope: Deactivated successfully. Dec 13 13:57:03.170680 systemd[1]: sshd@15-10.0.0.14:22-10.0.0.1:60866.service: Deactivated successfully. Dec 13 13:57:03.170876 systemd-logind[1209]: Session 16 logged out. Waiting for processes to exit. Dec 13 13:57:03.172062 systemd-logind[1209]: Removed session 16. Dec 13 13:57:03.167000 audit[4935]: CRED_DISP pid=4935 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.172438 kernel: audit: type=1106 audit(1734098223.167:1442): pid=4935 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.14:22-10.0.0.1:60866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:03.202000 audit[4947]: USER_ACCT pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.203688 sshd[4947]: Accepted publickey for core from 10.0.0.1 port 60876 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:03.203000 audit[4947]: CRED_ACQ pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.203000 audit[4947]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff85b47c0 a2=3 a3=1 items=0 ppid=1 pid=4947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:03.203000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:03.205134 sshd[4947]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:03.208429 systemd-logind[1209]: New session 17 of user core. Dec 13 13:57:03.208998 systemd[1]: Started session-17.scope. Dec 13 13:57:03.211000 audit[4947]: USER_START pid=4947 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.212000 audit[4950]: CRED_ACQ pid=4950 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.470412 sshd[4947]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:03.470970 systemd[1]: Started sshd@17-10.0.0.14:22-10.0.0.1:60878.service. Dec 13 13:57:03.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.14:22-10.0.0.1:60878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:03.471000 audit[4947]: USER_END pid=4947 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.471000 audit[4947]: CRED_DISP pid=4947 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.474217 systemd-logind[1209]: Session 17 logged out. Waiting for processes to exit. Dec 13 13:57:03.474377 systemd[1]: session-17.scope: Deactivated successfully. Dec 13 13:57:03.475383 systemd-logind[1209]: Removed session 17. Dec 13 13:57:03.475703 systemd[1]: sshd@16-10.0.0.14:22-10.0.0.1:60876.service: Deactivated successfully. Dec 13 13:57:03.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.14:22-10.0.0.1:60876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:03.515000 audit[4958]: USER_ACCT pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.517043 sshd[4958]: Accepted publickey for core from 10.0.0.1 port 60878 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:03.516000 audit[4958]: CRED_ACQ pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.516000 audit[4958]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2b17250 a2=3 a3=1 items=0 ppid=1 pid=4958 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:03.516000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:03.518272 sshd[4958]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:03.522567 systemd[1]: Started session-18.scope. Dec 13 13:57:03.523006 systemd-logind[1209]: New session 18 of user core. Dec 13 13:57:03.525000 audit[4958]: USER_START pid=4958 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.526000 audit[4961]: CRED_ACQ pid=4961 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:03.685000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:57:03.685000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400265c620 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:57:03.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:57:03.685000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:57:03.685000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400241cde0 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:57:03.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:57:03.685000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:57:03.685000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4002f44940 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:57:03.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:57:03.685000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Dec 13 13:57:03.685000 audit[1957]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400241ce20 a2=fc6 a3=0 items=0 ppid=1784 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c26,c642 key=(null) Dec 13 13:57:03.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Dec 13 13:57:05.040000 audit[4996]: NETFILTER_CFG table=filter:119 family=2 entries=20 op=nft_register_rule pid=4996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:05.040000 audit[4996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=ffffc1490880 a2=0 a3=1 items=0 ppid=2264 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:05.040000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:05.049000 audit[4996]: NETFILTER_CFG table=nat:120 family=2 entries=22 op=nft_register_rule pid=4996 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:05.049000 audit[4996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc1490880 a2=0 a3=1 items=0 ppid=2264 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:05.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:05.054952 sshd[4958]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:05.056000 audit[4958]: USER_END pid=4958 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.056000 audit[4958]: CRED_DISP pid=4958 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.059342 systemd[1]: Started sshd@18-10.0.0.14:22-10.0.0.1:60892.service. Dec 13 13:57:05.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.14:22-10.0.0.1:60892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:05.059898 systemd[1]: sshd@17-10.0.0.14:22-10.0.0.1:60878.service: Deactivated successfully. Dec 13 13:57:05.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.14:22-10.0.0.1:60878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:05.065761 systemd-logind[1209]: Session 18 logged out. Waiting for processes to exit. Dec 13 13:57:05.065909 systemd[1]: session-18.scope: Deactivated successfully. Dec 13 13:57:05.067000 audit[5001]: NETFILTER_CFG table=filter:121 family=2 entries=32 op=nft_register_rule pid=5001 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:05.067000 audit[5001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=ffffe65f9440 a2=0 a3=1 items=0 ppid=2264 pid=5001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:05.067000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:05.070172 systemd-logind[1209]: Removed session 18. Dec 13 13:57:05.072000 audit[5001]: NETFILTER_CFG table=nat:122 family=2 entries=22 op=nft_register_rule pid=5001 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:05.072000 audit[5001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe65f9440 a2=0 a3=1 items=0 ppid=2264 pid=5001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:05.072000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:05.107000 audit[4998]: USER_ACCT pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.109290 sshd[4998]: Accepted publickey for core from 10.0.0.1 port 60892 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:05.108000 audit[4998]: CRED_ACQ pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.108000 audit[4998]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9863200 a2=3 a3=1 items=0 ppid=1 pid=4998 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:05.108000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:05.110682 sshd[4998]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:05.114343 systemd-logind[1209]: New session 19 of user core. Dec 13 13:57:05.114859 systemd[1]: Started session-19.scope. Dec 13 13:57:05.117000 audit[4998]: USER_START pid=4998 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.118000 audit[5003]: CRED_ACQ pid=5003 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.372148 sshd[4998]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:05.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.14:22-10.0.0.1:60900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:05.376000 audit[4998]: USER_END pid=4998 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.376000 audit[4998]: CRED_DISP pid=4998 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.377139 systemd[1]: Started sshd@19-10.0.0.14:22-10.0.0.1:60900.service. Dec 13 13:57:05.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.14:22-10.0.0.1:60892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:05.379299 systemd[1]: sshd@18-10.0.0.14:22-10.0.0.1:60892.service: Deactivated successfully. Dec 13 13:57:05.380067 systemd[1]: session-19.scope: Deactivated successfully. Dec 13 13:57:05.383028 systemd-logind[1209]: Session 19 logged out. Waiting for processes to exit. Dec 13 13:57:05.384298 systemd-logind[1209]: Removed session 19. Dec 13 13:57:05.417000 audit[5012]: USER_ACCT pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.419350 sshd[5012]: Accepted publickey for core from 10.0.0.1 port 60900 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:05.418000 audit[5012]: CRED_ACQ pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.419000 audit[5012]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe30f4670 a2=3 a3=1 items=0 ppid=1 pid=5012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:05.419000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:05.420988 sshd[5012]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:05.425546 systemd-logind[1209]: New session 20 of user core. Dec 13 13:57:05.425847 systemd[1]: Started session-20.scope. Dec 13 13:57:05.429000 audit[5012]: USER_START pid=5012 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.430000 audit[5015]: CRED_ACQ pid=5015 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.558478 sshd[5012]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:05.558000 audit[5012]: USER_END pid=5012 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.558000 audit[5012]: CRED_DISP pid=5012 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:05.561603 systemd[1]: sshd@19-10.0.0.14:22-10.0.0.1:60900.service: Deactivated successfully. Dec 13 13:57:05.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.14:22-10.0.0.1:60900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:05.562401 systemd[1]: session-20.scope: Deactivated successfully. Dec 13 13:57:05.562978 systemd-logind[1209]: Session 20 logged out. Waiting for processes to exit. Dec 13 13:57:05.563749 systemd-logind[1209]: Removed session 20. Dec 13 13:57:07.477593 kubelet[2068]: E1213 13:57:07.477551 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:57:07.491273 kubelet[2068]: I1213 13:57:07.491200 2068 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-nk6d6" podStartSLOduration=39.250079316 podStartE2EDuration="42.491184172s" podCreationTimestamp="2024-12-13 13:56:25 +0000 UTC" firstStartedPulling="2024-12-13 13:56:49.521859157 +0000 UTC m=+47.591188668" lastFinishedPulling="2024-12-13 13:56:52.762964053 +0000 UTC m=+50.832293524" observedRunningTime="2024-12-13 13:56:53.188246685 +0000 UTC m=+51.257576196" watchObservedRunningTime="2024-12-13 13:57:07.491184172 +0000 UTC m=+65.560513683" Dec 13 13:57:09.890000 audit[5052]: NETFILTER_CFG table=filter:123 family=2 entries=20 op=nft_register_rule pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:09.892460 kernel: kauditd_printk_skb: 69 callbacks suppressed Dec 13 13:57:09.892544 kernel: audit: type=1325 audit(1734098229.890:1488): table=filter:123 family=2 entries=20 op=nft_register_rule pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:09.890000 audit[5052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffe97e37b0 a2=0 a3=1 items=0 ppid=2264 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:09.900497 kernel: audit: type=1300 audit(1734098229.890:1488): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffe97e37b0 a2=0 a3=1 items=0 ppid=2264 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:09.900559 kernel: audit: type=1327 audit(1734098229.890:1488): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:09.890000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:09.908000 audit[5052]: NETFILTER_CFG table=nat:124 family=2 entries=106 op=nft_register_chain pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:09.908000 audit[5052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=ffffe97e37b0 a2=0 a3=1 items=0 ppid=2264 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:09.916284 kernel: audit: type=1325 audit(1734098229.908:1489): table=nat:124 family=2 entries=106 op=nft_register_chain pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Dec 13 13:57:09.916338 kernel: audit: type=1300 audit(1734098229.908:1489): arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=ffffe97e37b0 a2=0 a3=1 items=0 ppid=2264 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:09.916375 kernel: audit: type=1327 audit(1734098229.908:1489): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:09.908000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Dec 13 13:57:10.562922 systemd[1]: Started sshd@20-10.0.0.14:22-10.0.0.1:60906.service. Dec 13 13:57:10.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.14:22-10.0.0.1:60906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:10.568402 kernel: audit: type=1130 audit(1734098230.561:1490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.14:22-10.0.0.1:60906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:10.601000 audit[5055]: USER_ACCT pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.602878 sshd[5055]: Accepted publickey for core from 10.0.0.1 port 60906 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:10.604439 sshd[5055]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:10.602000 audit[5055]: CRED_ACQ pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.610867 kernel: audit: type=1101 audit(1734098230.601:1491): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.610938 kernel: audit: type=1103 audit(1734098230.602:1492): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.614125 kernel: audit: type=1006 audit(1734098230.602:1493): pid=5055 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Dec 13 13:57:10.602000 audit[5055]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd63da800 a2=3 a3=1 items=0 ppid=1 pid=5055 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:10.602000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:10.619088 systemd[1]: Started session-21.scope. Dec 13 13:57:10.620277 systemd-logind[1209]: New session 21 of user core. Dec 13 13:57:10.624000 audit[5055]: USER_START pid=5055 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.626000 audit[5057]: CRED_ACQ pid=5057 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.735995 sshd[5055]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:10.735000 audit[5055]: USER_END pid=5055 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.735000 audit[5055]: CRED_DISP pid=5055 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:10.738345 systemd[1]: sshd@20-10.0.0.14:22-10.0.0.1:60906.service: Deactivated successfully. Dec 13 13:57:10.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.14:22-10.0.0.1:60906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:10.739131 systemd[1]: session-21.scope: Deactivated successfully. Dec 13 13:57:10.739648 systemd-logind[1209]: Session 21 logged out. Waiting for processes to exit. Dec 13 13:57:10.740381 systemd-logind[1209]: Removed session 21. Dec 13 13:57:15.741132 systemd[1]: Started sshd@21-10.0.0.14:22-10.0.0.1:47598.service. Dec 13 13:57:15.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.14:22-10.0.0.1:47598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:15.744884 kernel: kauditd_printk_skb: 7 callbacks suppressed Dec 13 13:57:15.744932 kernel: audit: type=1130 audit(1734098235.739:1499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.14:22-10.0.0.1:47598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:15.779000 audit[5068]: USER_ACCT pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.780794 sshd[5068]: Accepted publickey for core from 10.0.0.1 port 47598 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:15.782288 sshd[5068]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:15.780000 audit[5068]: CRED_ACQ pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.786761 kernel: audit: type=1101 audit(1734098235.779:1500): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.786824 kernel: audit: type=1103 audit(1734098235.780:1501): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.790196 kernel: audit: type=1006 audit(1734098235.780:1502): pid=5068 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Dec 13 13:57:15.790377 kernel: audit: type=1300 audit(1734098235.780:1502): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0e7b330 a2=3 a3=1 items=0 ppid=1 pid=5068 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:15.780000 audit[5068]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0e7b330 a2=3 a3=1 items=0 ppid=1 pid=5068 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:15.791523 systemd[1]: Started session-22.scope. Dec 13 13:57:15.794563 systemd-logind[1209]: New session 22 of user core. Dec 13 13:57:15.780000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:15.796163 kernel: audit: type=1327 audit(1734098235.780:1502): proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:15.798000 audit[5068]: USER_START pid=5068 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.802000 audit[5070]: CRED_ACQ pid=5070 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.806654 kernel: audit: type=1105 audit(1734098235.798:1503): pid=5068 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.806718 kernel: audit: type=1103 audit(1734098235.802:1504): pid=5070 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.908131 sshd[5068]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:15.907000 audit[5068]: USER_END pid=5068 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.910510 systemd[1]: sshd@21-10.0.0.14:22-10.0.0.1:47598.service: Deactivated successfully. Dec 13 13:57:15.911267 systemd[1]: session-22.scope: Deactivated successfully. Dec 13 13:57:15.913386 systemd-logind[1209]: Session 22 logged out. Waiting for processes to exit. Dec 13 13:57:15.907000 audit[5068]: CRED_DISP pid=5068 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.917029 kernel: audit: type=1106 audit(1734098235.907:1505): pid=5068 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.917091 kernel: audit: type=1104 audit(1734098235.907:1506): pid=5068 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:15.917158 systemd-logind[1209]: Removed session 22. Dec 13 13:57:15.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.14:22-10.0.0.1:47598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:18.013430 kubelet[2068]: E1213 13:57:18.013395 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:57:20.013606 kubelet[2068]: E1213 13:57:20.013573 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:57:20.015506 kubelet[2068]: E1213 13:57:20.015483 2068 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Dec 13 13:57:20.913471 systemd[1]: Started sshd@22-10.0.0.14:22-10.0.0.1:47606.service. Dec 13 13:57:20.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.14:22-10.0.0.1:47606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:20.915776 kernel: kauditd_printk_skb: 1 callbacks suppressed Dec 13 13:57:20.915861 kernel: audit: type=1130 audit(1734098240.912:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.14:22-10.0.0.1:47606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Dec 13 13:57:20.959000 audit[5085]: USER_ACCT pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:20.960594 sshd[5085]: Accepted publickey for core from 10.0.0.1 port 47606 ssh2: RSA SHA256:/HJyHm5Z3TKV0xVrRefgtheJNUHxRnoHBht1EzpqsE0 Dec 13 13:57:20.962215 sshd[5085]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Dec 13 13:57:20.960000 audit[5085]: CRED_ACQ pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:20.967382 kernel: audit: type=1101 audit(1734098240.959:1509): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:20.967447 kernel: audit: type=1103 audit(1734098240.960:1510): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:20.967464 kernel: audit: type=1006 audit(1734098240.960:1511): pid=5085 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Dec 13 13:57:20.960000 audit[5085]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3c38f30 a2=3 a3=1 items=0 ppid=1 pid=5085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:20.973515 kernel: audit: type=1300 audit(1734098240.960:1511): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3c38f30 a2=3 a3=1 items=0 ppid=1 pid=5085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Dec 13 13:57:20.960000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:20.977018 systemd[1]: Started session-23.scope. Dec 13 13:57:20.978037 systemd-logind[1209]: New session 23 of user core. Dec 13 13:57:20.980518 kernel: audit: type=1327 audit(1734098240.960:1511): proctitle=737368643A20636F7265205B707269765D Dec 13 13:57:20.980000 audit[5085]: USER_START pid=5085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:20.981000 audit[5087]: CRED_ACQ pid=5087 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:20.989020 kernel: audit: type=1105 audit(1734098240.980:1512): pid=5085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:20.989079 kernel: audit: type=1103 audit(1734098240.981:1513): pid=5087 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:21.134921 sshd[5085]: pam_unix(sshd:session): session closed for user core Dec 13 13:57:21.134000 audit[5085]: USER_END pid=5085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:21.137576 systemd[1]: session-23.scope: Deactivated successfully. Dec 13 13:57:21.138183 systemd-logind[1209]: Session 23 logged out. Waiting for processes to exit. Dec 13 13:57:21.138336 systemd[1]: sshd@22-10.0.0.14:22-10.0.0.1:47606.service: Deactivated successfully. Dec 13 13:57:21.139435 systemd-logind[1209]: Removed session 23. Dec 13 13:57:21.134000 audit[5085]: CRED_DISP pid=5085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:21.142674 kernel: audit: type=1106 audit(1734098241.134:1514): pid=5085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:21.142718 kernel: audit: type=1104 audit(1734098241.134:1515): pid=5085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Dec 13 13:57:21.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.14:22-10.0.0.1:47606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'