Mar 17 18:33:32.830563 kernel: Linux version 5.15.179-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Mar 17 17:12:34 -00 2025 Mar 17 18:33:32.830582 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:33:32.830590 kernel: BIOS-provided physical RAM map: Mar 17 18:33:32.830596 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Mar 17 18:33:32.830601 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Mar 17 18:33:32.830607 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Mar 17 18:33:32.830613 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Mar 17 18:33:32.830619 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Mar 17 18:33:32.830626 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Mar 17 18:33:32.830631 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Mar 17 18:33:32.830637 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Mar 17 18:33:32.830642 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Mar 17 18:33:32.830647 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Mar 17 18:33:32.830653 kernel: NX (Execute Disable) protection: active Mar 17 18:33:32.830661 kernel: SMBIOS 2.8 present. Mar 17 18:33:32.830667 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Mar 17 18:33:32.830673 kernel: Hypervisor detected: KVM Mar 17 18:33:32.830679 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Mar 17 18:33:32.830685 kernel: kvm-clock: cpu 0, msr 5719a001, primary cpu clock Mar 17 18:33:32.830691 kernel: kvm-clock: using sched offset of 2350614552 cycles Mar 17 18:33:32.830697 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Mar 17 18:33:32.830704 kernel: tsc: Detected 2794.750 MHz processor Mar 17 18:33:32.830710 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Mar 17 18:33:32.830718 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Mar 17 18:33:32.830724 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Mar 17 18:33:32.830730 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Mar 17 18:33:32.830736 kernel: Using GB pages for direct mapping Mar 17 18:33:32.830742 kernel: ACPI: Early table checksum verification disabled Mar 17 18:33:32.830748 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Mar 17 18:33:32.830754 kernel: ACPI: RSDT 0x000000009CFE2408 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:33:32.830761 kernel: ACPI: FACP 0x000000009CFE21E8 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:33:32.830767 kernel: ACPI: DSDT 0x000000009CFE0040 0021A8 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:33:32.830774 kernel: ACPI: FACS 0x000000009CFE0000 000040 Mar 17 18:33:32.830780 kernel: ACPI: APIC 0x000000009CFE22DC 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:33:32.830786 kernel: ACPI: HPET 0x000000009CFE236C 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:33:32.830792 kernel: ACPI: MCFG 0x000000009CFE23A4 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:33:32.830798 kernel: ACPI: WAET 0x000000009CFE23E0 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Mar 17 18:33:32.830804 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21e8-0x9cfe22db] Mar 17 18:33:32.830810 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21e7] Mar 17 18:33:32.830816 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Mar 17 18:33:32.830826 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22dc-0x9cfe236b] Mar 17 18:33:32.830832 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe236c-0x9cfe23a3] Mar 17 18:33:32.830848 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23a4-0x9cfe23df] Mar 17 18:33:32.830855 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23e0-0x9cfe2407] Mar 17 18:33:32.830861 kernel: No NUMA configuration found Mar 17 18:33:32.830868 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Mar 17 18:33:32.830876 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Mar 17 18:33:32.830882 kernel: Zone ranges: Mar 17 18:33:32.830889 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Mar 17 18:33:32.830895 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Mar 17 18:33:32.830902 kernel: Normal empty Mar 17 18:33:32.830908 kernel: Movable zone start for each node Mar 17 18:33:32.830914 kernel: Early memory node ranges Mar 17 18:33:32.830921 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Mar 17 18:33:32.830927 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Mar 17 18:33:32.830935 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Mar 17 18:33:32.830942 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Mar 17 18:33:32.830948 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Mar 17 18:33:32.830955 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Mar 17 18:33:32.830961 kernel: ACPI: PM-Timer IO Port: 0x608 Mar 17 18:33:32.830968 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Mar 17 18:33:32.830974 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Mar 17 18:33:32.830981 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Mar 17 18:33:32.830987 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Mar 17 18:33:32.830994 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Mar 17 18:33:32.831001 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Mar 17 18:33:32.831008 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Mar 17 18:33:32.831014 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Mar 17 18:33:32.831021 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Mar 17 18:33:32.831027 kernel: TSC deadline timer available Mar 17 18:33:32.831034 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Mar 17 18:33:32.831041 kernel: kvm-guest: KVM setup pv remote TLB flush Mar 17 18:33:32.831047 kernel: kvm-guest: setup PV sched yield Mar 17 18:33:32.831053 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Mar 17 18:33:32.831061 kernel: Booting paravirtualized kernel on KVM Mar 17 18:33:32.831068 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Mar 17 18:33:32.831074 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Mar 17 18:33:32.831089 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Mar 17 18:33:32.831096 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Mar 17 18:33:32.831102 kernel: pcpu-alloc: [0] 0 1 2 3 Mar 17 18:33:32.831108 kernel: kvm-guest: setup async PF for cpu 0 Mar 17 18:33:32.831115 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Mar 17 18:33:32.831121 kernel: kvm-guest: PV spinlocks enabled Mar 17 18:33:32.831129 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Mar 17 18:33:32.831136 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Mar 17 18:33:32.831142 kernel: Policy zone: DMA32 Mar 17 18:33:32.831149 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:33:32.831156 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Mar 17 18:33:32.831163 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Mar 17 18:33:32.831170 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Mar 17 18:33:32.831177 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Mar 17 18:33:32.831187 kernel: Memory: 2436696K/2571752K available (12294K kernel code, 2278K rwdata, 13724K rodata, 47472K init, 4108K bss, 134796K reserved, 0K cma-reserved) Mar 17 18:33:32.831195 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Mar 17 18:33:32.831203 kernel: ftrace: allocating 34580 entries in 136 pages Mar 17 18:33:32.831211 kernel: ftrace: allocated 136 pages with 2 groups Mar 17 18:33:32.831218 kernel: rcu: Hierarchical RCU implementation. Mar 17 18:33:32.831225 kernel: rcu: RCU event tracing is enabled. Mar 17 18:33:32.831231 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Mar 17 18:33:32.831238 kernel: Rude variant of Tasks RCU enabled. Mar 17 18:33:32.831244 kernel: Tracing variant of Tasks RCU enabled. Mar 17 18:33:32.831260 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Mar 17 18:33:32.831266 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Mar 17 18:33:32.831273 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Mar 17 18:33:32.831279 kernel: random: crng init done Mar 17 18:33:32.831286 kernel: Console: colour VGA+ 80x25 Mar 17 18:33:32.831292 kernel: printk: console [ttyS0] enabled Mar 17 18:33:32.831299 kernel: ACPI: Core revision 20210730 Mar 17 18:33:32.831305 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Mar 17 18:33:32.831312 kernel: APIC: Switch to symmetric I/O mode setup Mar 17 18:33:32.831319 kernel: x2apic enabled Mar 17 18:33:32.831326 kernel: Switched APIC routing to physical x2apic. Mar 17 18:33:32.831332 kernel: kvm-guest: setup PV IPIs Mar 17 18:33:32.831339 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Mar 17 18:33:32.831345 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Mar 17 18:33:32.831352 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Mar 17 18:33:32.831359 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Mar 17 18:33:32.831365 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Mar 17 18:33:32.831372 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Mar 17 18:33:32.831384 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Mar 17 18:33:32.831390 kernel: Spectre V2 : Mitigation: Retpolines Mar 17 18:33:32.831397 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Mar 17 18:33:32.831406 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Mar 17 18:33:32.831412 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Mar 17 18:33:32.831419 kernel: RETBleed: Mitigation: untrained return thunk Mar 17 18:33:32.831426 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Mar 17 18:33:32.831433 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Mar 17 18:33:32.831440 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Mar 17 18:33:32.831448 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Mar 17 18:33:32.831455 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Mar 17 18:33:32.831462 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Mar 17 18:33:32.831469 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Mar 17 18:33:32.831476 kernel: Freeing SMP alternatives memory: 32K Mar 17 18:33:32.831482 kernel: pid_max: default: 32768 minimum: 301 Mar 17 18:33:32.831489 kernel: LSM: Security Framework initializing Mar 17 18:33:32.831496 kernel: SELinux: Initializing. Mar 17 18:33:32.831504 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:33:32.831511 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:33:32.831518 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Mar 17 18:33:32.831525 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Mar 17 18:33:32.831539 kernel: ... version: 0 Mar 17 18:33:32.831546 kernel: ... bit width: 48 Mar 17 18:33:32.831553 kernel: ... generic registers: 6 Mar 17 18:33:32.831560 kernel: ... value mask: 0000ffffffffffff Mar 17 18:33:32.831566 kernel: ... max period: 00007fffffffffff Mar 17 18:33:32.831574 kernel: ... fixed-purpose events: 0 Mar 17 18:33:32.831582 kernel: ... event mask: 000000000000003f Mar 17 18:33:32.831588 kernel: signal: max sigframe size: 1776 Mar 17 18:33:32.831595 kernel: rcu: Hierarchical SRCU implementation. Mar 17 18:33:32.831602 kernel: smp: Bringing up secondary CPUs ... Mar 17 18:33:32.831609 kernel: x86: Booting SMP configuration: Mar 17 18:33:32.831615 kernel: .... node #0, CPUs: #1 Mar 17 18:33:32.831622 kernel: kvm-clock: cpu 1, msr 5719a041, secondary cpu clock Mar 17 18:33:32.831629 kernel: kvm-guest: setup async PF for cpu 1 Mar 17 18:33:32.831637 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Mar 17 18:33:32.831643 kernel: #2 Mar 17 18:33:32.831650 kernel: kvm-clock: cpu 2, msr 5719a081, secondary cpu clock Mar 17 18:33:32.831657 kernel: kvm-guest: setup async PF for cpu 2 Mar 17 18:33:32.831664 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Mar 17 18:33:32.831671 kernel: #3 Mar 17 18:33:32.831677 kernel: kvm-clock: cpu 3, msr 5719a0c1, secondary cpu clock Mar 17 18:33:32.831684 kernel: kvm-guest: setup async PF for cpu 3 Mar 17 18:33:32.831691 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Mar 17 18:33:32.831699 kernel: smp: Brought up 1 node, 4 CPUs Mar 17 18:33:32.831705 kernel: smpboot: Max logical packages: 1 Mar 17 18:33:32.831712 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Mar 17 18:33:32.831719 kernel: devtmpfs: initialized Mar 17 18:33:32.831726 kernel: x86/mm: Memory block size: 128MB Mar 17 18:33:32.831733 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Mar 17 18:33:32.831739 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Mar 17 18:33:32.831746 kernel: pinctrl core: initialized pinctrl subsystem Mar 17 18:33:32.831753 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Mar 17 18:33:32.831761 kernel: audit: initializing netlink subsys (disabled) Mar 17 18:33:32.831768 kernel: audit: type=2000 audit(1742236412.538:1): state=initialized audit_enabled=0 res=1 Mar 17 18:33:32.831775 kernel: thermal_sys: Registered thermal governor 'step_wise' Mar 17 18:33:32.831782 kernel: thermal_sys: Registered thermal governor 'user_space' Mar 17 18:33:32.831788 kernel: cpuidle: using governor menu Mar 17 18:33:32.831795 kernel: ACPI: bus type PCI registered Mar 17 18:33:32.831802 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Mar 17 18:33:32.831809 kernel: dca service started, version 1.12.1 Mar 17 18:33:32.831816 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Mar 17 18:33:32.831824 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Mar 17 18:33:32.831831 kernel: PCI: Using configuration type 1 for base access Mar 17 18:33:32.831838 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Mar 17 18:33:32.831853 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Mar 17 18:33:32.831860 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Mar 17 18:33:32.831867 kernel: ACPI: Added _OSI(Module Device) Mar 17 18:33:32.831874 kernel: ACPI: Added _OSI(Processor Device) Mar 17 18:33:32.831880 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Mar 17 18:33:32.831887 kernel: ACPI: Added _OSI(Processor Aggregator Device) Mar 17 18:33:32.831895 kernel: ACPI: Added _OSI(Linux-Dell-Video) Mar 17 18:33:32.831902 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Mar 17 18:33:32.831909 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Mar 17 18:33:32.831916 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Mar 17 18:33:32.831937 kernel: ACPI: Interpreter enabled Mar 17 18:33:32.831946 kernel: ACPI: PM: (supports S0 S3 S5) Mar 17 18:33:32.831953 kernel: ACPI: Using IOAPIC for interrupt routing Mar 17 18:33:32.831960 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Mar 17 18:33:32.831967 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Mar 17 18:33:32.831974 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Mar 17 18:33:32.832885 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Mar 17 18:33:32.832972 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Mar 17 18:33:32.833039 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Mar 17 18:33:32.833048 kernel: PCI host bridge to bus 0000:00 Mar 17 18:33:32.833119 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Mar 17 18:33:32.833178 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Mar 17 18:33:32.833248 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Mar 17 18:33:32.833307 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Mar 17 18:33:32.833364 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Mar 17 18:33:32.833423 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Mar 17 18:33:32.833482 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Mar 17 18:33:32.833571 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Mar 17 18:33:32.833651 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Mar 17 18:33:32.833723 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Mar 17 18:33:32.833791 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Mar 17 18:33:32.833870 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Mar 17 18:33:32.833939 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Mar 17 18:33:32.834012 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Mar 17 18:33:32.834080 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Mar 17 18:33:32.834154 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Mar 17 18:33:32.834222 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Mar 17 18:33:32.834296 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Mar 17 18:33:32.834364 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Mar 17 18:33:32.834431 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Mar 17 18:33:32.834498 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Mar 17 18:33:32.834582 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Mar 17 18:33:32.834654 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Mar 17 18:33:32.834720 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Mar 17 18:33:32.834788 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Mar 17 18:33:32.834877 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Mar 17 18:33:32.834958 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Mar 17 18:33:32.835026 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Mar 17 18:33:32.835099 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Mar 17 18:33:32.835169 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Mar 17 18:33:32.835236 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Mar 17 18:33:32.835405 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Mar 17 18:33:32.835506 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Mar 17 18:33:32.835520 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Mar 17 18:33:32.835540 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Mar 17 18:33:32.835549 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Mar 17 18:33:32.835562 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Mar 17 18:33:32.835571 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Mar 17 18:33:32.835580 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Mar 17 18:33:32.835589 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Mar 17 18:33:32.835598 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Mar 17 18:33:32.835607 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Mar 17 18:33:32.835616 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Mar 17 18:33:32.835625 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Mar 17 18:33:32.835634 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Mar 17 18:33:32.835645 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Mar 17 18:33:32.835654 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Mar 17 18:33:32.835664 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Mar 17 18:33:32.835673 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Mar 17 18:33:32.835682 kernel: iommu: Default domain type: Translated Mar 17 18:33:32.835691 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Mar 17 18:33:32.835786 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Mar 17 18:33:32.835894 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Mar 17 18:33:32.835987 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Mar 17 18:33:32.836003 kernel: vgaarb: loaded Mar 17 18:33:32.836012 kernel: pps_core: LinuxPPS API ver. 1 registered Mar 17 18:33:32.836022 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Mar 17 18:33:32.836031 kernel: PTP clock support registered Mar 17 18:33:32.836041 kernel: PCI: Using ACPI for IRQ routing Mar 17 18:33:32.836050 kernel: PCI: pci_cache_line_size set to 64 bytes Mar 17 18:33:32.836059 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Mar 17 18:33:32.836068 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Mar 17 18:33:32.836077 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Mar 17 18:33:32.836088 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Mar 17 18:33:32.836098 kernel: clocksource: Switched to clocksource kvm-clock Mar 17 18:33:32.836107 kernel: VFS: Disk quotas dquot_6.6.0 Mar 17 18:33:32.836117 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Mar 17 18:33:32.836126 kernel: pnp: PnP ACPI init Mar 17 18:33:32.836247 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Mar 17 18:33:32.836263 kernel: pnp: PnP ACPI: found 6 devices Mar 17 18:33:32.836272 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Mar 17 18:33:32.836284 kernel: NET: Registered PF_INET protocol family Mar 17 18:33:32.836293 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Mar 17 18:33:32.836303 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Mar 17 18:33:32.836312 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Mar 17 18:33:32.836321 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Mar 17 18:33:32.836330 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Mar 17 18:33:32.836340 kernel: TCP: Hash tables configured (established 32768 bind 32768) Mar 17 18:33:32.836349 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:33:32.836360 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:33:32.836369 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Mar 17 18:33:32.836379 kernel: NET: Registered PF_XDP protocol family Mar 17 18:33:32.836463 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Mar 17 18:33:32.836560 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Mar 17 18:33:32.836644 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Mar 17 18:33:32.836727 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Mar 17 18:33:32.836808 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Mar 17 18:33:32.836906 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Mar 17 18:33:32.836923 kernel: PCI: CLS 0 bytes, default 64 Mar 17 18:33:32.836932 kernel: Initialise system trusted keyrings Mar 17 18:33:32.836941 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Mar 17 18:33:32.836950 kernel: Key type asymmetric registered Mar 17 18:33:32.836959 kernel: Asymmetric key parser 'x509' registered Mar 17 18:33:32.836968 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Mar 17 18:33:32.836977 kernel: io scheduler mq-deadline registered Mar 17 18:33:32.836986 kernel: io scheduler kyber registered Mar 17 18:33:32.836995 kernel: io scheduler bfq registered Mar 17 18:33:32.837007 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Mar 17 18:33:32.837017 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Mar 17 18:33:32.837026 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Mar 17 18:33:32.837036 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Mar 17 18:33:32.837045 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Mar 17 18:33:32.837054 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Mar 17 18:33:32.837063 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Mar 17 18:33:32.837073 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Mar 17 18:33:32.837082 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Mar 17 18:33:32.837178 kernel: rtc_cmos 00:04: RTC can wake from S4 Mar 17 18:33:32.837192 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Mar 17 18:33:32.837273 kernel: rtc_cmos 00:04: registered as rtc0 Mar 17 18:33:32.837358 kernel: rtc_cmos 00:04: setting system clock to 2025-03-17T18:33:32 UTC (1742236412) Mar 17 18:33:32.837444 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Mar 17 18:33:32.837457 kernel: NET: Registered PF_INET6 protocol family Mar 17 18:33:32.837466 kernel: Segment Routing with IPv6 Mar 17 18:33:32.837475 kernel: In-situ OAM (IOAM) with IPv6 Mar 17 18:33:32.837487 kernel: NET: Registered PF_PACKET protocol family Mar 17 18:33:32.837496 kernel: Key type dns_resolver registered Mar 17 18:33:32.837505 kernel: IPI shorthand broadcast: enabled Mar 17 18:33:32.837514 kernel: sched_clock: Marking stable (403141315, 100646522)->(545880706, -42092869) Mar 17 18:33:32.837523 kernel: registered taskstats version 1 Mar 17 18:33:32.837540 kernel: Loading compiled-in X.509 certificates Mar 17 18:33:32.837550 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.179-flatcar: d5b956bbabb2d386c0246a969032c0de9eaa8220' Mar 17 18:33:32.837559 kernel: Key type .fscrypt registered Mar 17 18:33:32.837568 kernel: Key type fscrypt-provisioning registered Mar 17 18:33:32.837579 kernel: ima: No TPM chip found, activating TPM-bypass! Mar 17 18:33:32.837588 kernel: ima: Allocated hash algorithm: sha1 Mar 17 18:33:32.837597 kernel: ima: No architecture policies found Mar 17 18:33:32.837606 kernel: clk: Disabling unused clocks Mar 17 18:33:32.837615 kernel: Freeing unused kernel image (initmem) memory: 47472K Mar 17 18:33:32.837624 kernel: Write protecting the kernel read-only data: 28672k Mar 17 18:33:32.837633 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Mar 17 18:33:32.837642 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Mar 17 18:33:32.837651 kernel: Run /init as init process Mar 17 18:33:32.837662 kernel: with arguments: Mar 17 18:33:32.837671 kernel: /init Mar 17 18:33:32.837680 kernel: with environment: Mar 17 18:33:32.837689 kernel: HOME=/ Mar 17 18:33:32.837697 kernel: TERM=linux Mar 17 18:33:32.837707 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Mar 17 18:33:32.837719 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:33:32.837731 systemd[1]: Detected virtualization kvm. Mar 17 18:33:32.837742 systemd[1]: Detected architecture x86-64. Mar 17 18:33:32.837752 systemd[1]: Running in initrd. Mar 17 18:33:32.837762 systemd[1]: No hostname configured, using default hostname. Mar 17 18:33:32.837771 systemd[1]: Hostname set to . Mar 17 18:33:32.837782 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:33:32.837791 systemd[1]: Queued start job for default target initrd.target. Mar 17 18:33:32.837801 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:33:32.837811 systemd[1]: Reached target cryptsetup.target. Mar 17 18:33:32.837822 systemd[1]: Reached target paths.target. Mar 17 18:33:32.837851 systemd[1]: Reached target slices.target. Mar 17 18:33:32.837863 systemd[1]: Reached target swap.target. Mar 17 18:33:32.837873 systemd[1]: Reached target timers.target. Mar 17 18:33:32.837884 systemd[1]: Listening on iscsid.socket. Mar 17 18:33:32.837896 systemd[1]: Listening on iscsiuio.socket. Mar 17 18:33:32.837906 systemd[1]: Listening on systemd-journald-audit.socket. Mar 17 18:33:32.837916 systemd[1]: Listening on systemd-journald-dev-log.socket. Mar 17 18:33:32.837926 systemd[1]: Listening on systemd-journald.socket. Mar 17 18:33:32.837936 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:33:32.837946 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:33:32.837956 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:33:32.837966 systemd[1]: Reached target sockets.target. Mar 17 18:33:32.837976 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:33:32.837988 systemd[1]: Finished network-cleanup.service. Mar 17 18:33:32.837998 systemd[1]: Starting systemd-fsck-usr.service... Mar 17 18:33:32.838008 systemd[1]: Starting systemd-journald.service... Mar 17 18:33:32.838019 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:33:32.838029 systemd[1]: Starting systemd-resolved.service... Mar 17 18:33:32.838039 systemd[1]: Starting systemd-vconsole-setup.service... Mar 17 18:33:32.838049 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:33:32.838059 systemd[1]: Finished systemd-fsck-usr.service. Mar 17 18:33:32.838069 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:33:32.838081 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:33:32.838093 systemd-journald[198]: Journal started Mar 17 18:33:32.838141 systemd-journald[198]: Runtime Journal (/run/log/journal/cd6d810c554e42b491fe339810f4cf5c) is 6.0M, max 48.5M, 42.5M free. Mar 17 18:33:32.827299 systemd-modules-load[199]: Inserted module 'overlay' Mar 17 18:33:32.872298 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Mar 17 18:33:32.872316 kernel: Bridge firewalling registered Mar 17 18:33:32.872325 systemd[1]: Started systemd-journald.service. Mar 17 18:33:32.872338 kernel: audit: type=1130 audit(1742236412.866:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.856187 systemd-resolved[200]: Positive Trust Anchors: Mar 17 18:33:32.880828 kernel: audit: type=1130 audit(1742236412.872:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.856193 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:33:32.889957 kernel: audit: type=1130 audit(1742236412.879:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.889979 kernel: audit: type=1130 audit(1742236412.883:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.856220 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:33:32.897383 kernel: SCSI subsystem initialized Mar 17 18:33:32.858268 systemd-resolved[200]: Defaulting to hostname 'linux'. Mar 17 18:33:32.859407 systemd-modules-load[199]: Inserted module 'br_netfilter' Mar 17 18:33:32.873290 systemd[1]: Started systemd-resolved.service. Mar 17 18:33:32.880976 systemd[1]: Finished systemd-vconsole-setup.service. Mar 17 18:33:32.884793 systemd[1]: Reached target nss-lookup.target. Mar 17 18:33:32.890511 systemd[1]: Starting dracut-cmdline-ask.service... Mar 17 18:33:32.904018 systemd[1]: Finished dracut-cmdline-ask.service. Mar 17 18:33:32.909537 kernel: audit: type=1130 audit(1742236412.904:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.905423 systemd[1]: Starting dracut-cmdline.service... Mar 17 18:33:32.914393 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Mar 17 18:33:32.914412 kernel: device-mapper: uevent: version 1.0.3 Mar 17 18:33:32.914425 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Mar 17 18:33:32.914442 dracut-cmdline[217]: dracut-dracut-053 Mar 17 18:33:32.915546 dracut-cmdline[217]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=249ccd113f901380672c0d31e18f792e8e0344094c0e39eedc449f039418b31a Mar 17 18:33:32.921224 systemd-modules-load[199]: Inserted module 'dm_multipath' Mar 17 18:33:32.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.921962 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:33:32.927335 kernel: audit: type=1130 audit(1742236412.922:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.923748 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:33:32.931646 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:33:32.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.936872 kernel: audit: type=1130 audit(1742236412.932:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:32.965869 kernel: Loading iSCSI transport class v2.0-870. Mar 17 18:33:32.980874 kernel: iscsi: registered transport (tcp) Mar 17 18:33:33.001861 kernel: iscsi: registered transport (qla4xxx) Mar 17 18:33:33.001882 kernel: QLogic iSCSI HBA Driver Mar 17 18:33:33.027285 systemd[1]: Finished dracut-cmdline.service. Mar 17 18:33:33.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:33.029581 systemd[1]: Starting dracut-pre-udev.service... Mar 17 18:33:33.033197 kernel: audit: type=1130 audit(1742236413.028:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:33.073863 kernel: raid6: avx2x4 gen() 28054 MB/s Mar 17 18:33:33.090861 kernel: raid6: avx2x4 xor() 7473 MB/s Mar 17 18:33:33.107857 kernel: raid6: avx2x2 gen() 32613 MB/s Mar 17 18:33:33.124859 kernel: raid6: avx2x2 xor() 19203 MB/s Mar 17 18:33:33.141858 kernel: raid6: avx2x1 gen() 26515 MB/s Mar 17 18:33:33.158858 kernel: raid6: avx2x1 xor() 15301 MB/s Mar 17 18:33:33.175860 kernel: raid6: sse2x4 gen() 14811 MB/s Mar 17 18:33:33.192870 kernel: raid6: sse2x4 xor() 7549 MB/s Mar 17 18:33:33.209864 kernel: raid6: sse2x2 gen() 16407 MB/s Mar 17 18:33:33.226864 kernel: raid6: sse2x2 xor() 9835 MB/s Mar 17 18:33:33.243867 kernel: raid6: sse2x1 gen() 12536 MB/s Mar 17 18:33:33.261253 kernel: raid6: sse2x1 xor() 7764 MB/s Mar 17 18:33:33.261275 kernel: raid6: using algorithm avx2x2 gen() 32613 MB/s Mar 17 18:33:33.261287 kernel: raid6: .... xor() 19203 MB/s, rmw enabled Mar 17 18:33:33.261974 kernel: raid6: using avx2x2 recovery algorithm Mar 17 18:33:33.273865 kernel: xor: automatically using best checksumming function avx Mar 17 18:33:33.363872 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Mar 17 18:33:33.371642 systemd[1]: Finished dracut-pre-udev.service. Mar 17 18:33:33.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:33.375000 audit: BPF prog-id=7 op=LOAD Mar 17 18:33:33.375000 audit: BPF prog-id=8 op=LOAD Mar 17 18:33:33.376863 kernel: audit: type=1130 audit(1742236413.372:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:33.376947 systemd[1]: Starting systemd-udevd.service... Mar 17 18:33:33.389092 systemd-udevd[401]: Using default interface naming scheme 'v252'. Mar 17 18:33:33.393447 systemd[1]: Started systemd-udevd.service. Mar 17 18:33:33.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:33.396378 systemd[1]: Starting dracut-pre-trigger.service... Mar 17 18:33:33.406869 dracut-pre-trigger[408]: rd.md=0: removing MD RAID activation Mar 17 18:33:33.428276 systemd[1]: Finished dracut-pre-trigger.service. Mar 17 18:33:33.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:33.430730 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:33:33.467036 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:33:33.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:33.496916 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Mar 17 18:33:33.513048 kernel: cryptd: max_cpu_qlen set to 1000 Mar 17 18:33:33.513068 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Mar 17 18:33:33.513077 kernel: GPT:9289727 != 19775487 Mar 17 18:33:33.513085 kernel: GPT:Alternate GPT header not at the end of the disk. Mar 17 18:33:33.513094 kernel: GPT:9289727 != 19775487 Mar 17 18:33:33.513102 kernel: GPT: Use GNU Parted to correct GPT errors. Mar 17 18:33:33.513110 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:33:33.525919 kernel: AVX2 version of gcm_enc/dec engaged. Mar 17 18:33:33.525954 kernel: AES CTR mode by8 optimization enabled Mar 17 18:33:33.528859 kernel: libata version 3.00 loaded. Mar 17 18:33:33.537896 kernel: ahci 0000:00:1f.2: version 3.0 Mar 17 18:33:33.541711 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Mar 17 18:33:33.541726 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Mar 17 18:33:33.541812 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Mar 17 18:33:33.541903 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (451) Mar 17 18:33:33.541914 kernel: scsi host0: ahci Mar 17 18:33:33.542026 kernel: scsi host1: ahci Mar 17 18:33:33.542115 kernel: scsi host2: ahci Mar 17 18:33:33.542198 kernel: scsi host3: ahci Mar 17 18:33:33.542294 kernel: scsi host4: ahci Mar 17 18:33:33.542373 kernel: scsi host5: ahci Mar 17 18:33:33.542453 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Mar 17 18:33:33.542462 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Mar 17 18:33:33.542471 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Mar 17 18:33:33.542483 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Mar 17 18:33:33.542493 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Mar 17 18:33:33.542502 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Mar 17 18:33:33.540690 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Mar 17 18:33:33.580224 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Mar 17 18:33:33.581265 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Mar 17 18:33:33.589133 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Mar 17 18:33:33.594449 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:33:33.595109 systemd[1]: Starting disk-uuid.service... Mar 17 18:33:33.604430 disk-uuid[524]: Primary Header is updated. Mar 17 18:33:33.604430 disk-uuid[524]: Secondary Entries is updated. Mar 17 18:33:33.604430 disk-uuid[524]: Secondary Header is updated. Mar 17 18:33:33.607612 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:33:33.854414 kernel: ata2: SATA link down (SStatus 0 SControl 300) Mar 17 18:33:33.854479 kernel: ata5: SATA link down (SStatus 0 SControl 300) Mar 17 18:33:33.854490 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Mar 17 18:33:33.854854 kernel: ata1: SATA link down (SStatus 0 SControl 300) Mar 17 18:33:33.855866 kernel: ata4: SATA link down (SStatus 0 SControl 300) Mar 17 18:33:33.856869 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Mar 17 18:33:33.857917 kernel: ata3.00: applying bridge limits Mar 17 18:33:33.858857 kernel: ata6: SATA link down (SStatus 0 SControl 300) Mar 17 18:33:33.858869 kernel: ata3.00: configured for UDMA/100 Mar 17 18:33:33.859866 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Mar 17 18:33:33.891216 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Mar 17 18:33:33.908377 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Mar 17 18:33:33.908403 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Mar 17 18:33:34.623620 disk-uuid[525]: The operation has completed successfully. Mar 17 18:33:34.624964 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Mar 17 18:33:34.642697 systemd[1]: disk-uuid.service: Deactivated successfully. Mar 17 18:33:34.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.642775 systemd[1]: Finished disk-uuid.service. Mar 17 18:33:34.652465 systemd[1]: Starting verity-setup.service... Mar 17 18:33:34.664868 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Mar 17 18:33:34.681600 systemd[1]: Found device dev-mapper-usr.device. Mar 17 18:33:34.683770 systemd[1]: Mounting sysusr-usr.mount... Mar 17 18:33:34.685361 systemd[1]: Finished verity-setup.service. Mar 17 18:33:34.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.742868 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Mar 17 18:33:34.743058 systemd[1]: Mounted sysusr-usr.mount. Mar 17 18:33:34.743227 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Mar 17 18:33:34.744427 systemd[1]: Starting ignition-setup.service... Mar 17 18:33:34.747597 systemd[1]: Starting parse-ip-for-networkd.service... Mar 17 18:33:34.757080 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Mar 17 18:33:34.757113 kernel: BTRFS info (device vda6): using free space tree Mar 17 18:33:34.757123 kernel: BTRFS info (device vda6): has skinny extents Mar 17 18:33:34.765004 systemd[1]: mnt-oem.mount: Deactivated successfully. Mar 17 18:33:34.808098 systemd[1]: Finished parse-ip-for-networkd.service. Mar 17 18:33:34.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.810000 audit: BPF prog-id=9 op=LOAD Mar 17 18:33:34.810661 systemd[1]: Starting systemd-networkd.service... Mar 17 18:33:34.836125 systemd-networkd[710]: lo: Link UP Mar 17 18:33:34.836137 systemd-networkd[710]: lo: Gained carrier Mar 17 18:33:34.838732 systemd-networkd[710]: Enumeration completed Mar 17 18:33:34.838832 systemd[1]: Started systemd-networkd.service. Mar 17 18:33:34.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.839643 systemd[1]: Reached target network.target. Mar 17 18:33:34.841912 systemd-networkd[710]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:33:34.842414 systemd[1]: Starting iscsiuio.service... Mar 17 18:33:34.843128 systemd-networkd[710]: eth0: Link UP Mar 17 18:33:34.843132 systemd-networkd[710]: eth0: Gained carrier Mar 17 18:33:34.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.846194 systemd[1]: Started iscsiuio.service. Mar 17 18:33:34.847793 systemd[1]: Starting iscsid.service... Mar 17 18:33:34.853260 iscsid[715]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:33:34.853260 iscsid[715]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Mar 17 18:33:34.853260 iscsid[715]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Mar 17 18:33:34.853260 iscsid[715]: If using hardware iscsi like qla4xxx this message can be ignored. Mar 17 18:33:34.853260 iscsid[715]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:33:34.853260 iscsid[715]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Mar 17 18:33:34.861007 systemd-networkd[710]: eth0: DHCPv4 address 10.0.0.17/16, gateway 10.0.0.1 acquired from 10.0.0.1 Mar 17 18:33:34.874422 systemd[1]: Started iscsid.service. Mar 17 18:33:34.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.875301 systemd[1]: Starting dracut-initqueue.service... Mar 17 18:33:34.877918 systemd[1]: Finished ignition-setup.service. Mar 17 18:33:34.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.880280 systemd[1]: Starting ignition-fetch-offline.service... Mar 17 18:33:34.885926 systemd[1]: Finished dracut-initqueue.service. Mar 17 18:33:34.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.891122 systemd[1]: Reached target remote-fs-pre.target. Mar 17 18:33:34.891213 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:33:34.891652 systemd[1]: Reached target remote-fs.target. Mar 17 18:33:34.892805 systemd[1]: Starting dracut-pre-mount.service... Mar 17 18:33:34.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.900593 systemd[1]: Finished dracut-pre-mount.service. Mar 17 18:33:34.920184 ignition[719]: Ignition 2.14.0 Mar 17 18:33:34.920199 ignition[719]: Stage: fetch-offline Mar 17 18:33:34.920274 ignition[719]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:33:34.920286 ignition[719]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:33:34.920411 ignition[719]: parsed url from cmdline: "" Mar 17 18:33:34.920416 ignition[719]: no config URL provided Mar 17 18:33:34.920422 ignition[719]: reading system config file "/usr/lib/ignition/user.ign" Mar 17 18:33:34.920430 ignition[719]: no config at "/usr/lib/ignition/user.ign" Mar 17 18:33:34.920452 ignition[719]: op(1): [started] loading QEMU firmware config module Mar 17 18:33:34.920458 ignition[719]: op(1): executing: "modprobe" "qemu_fw_cfg" Mar 17 18:33:34.923762 ignition[719]: op(1): [finished] loading QEMU firmware config module Mar 17 18:33:34.968953 ignition[719]: parsing config with SHA512: f64d28befbb535195614360bddc0f6e83c357a0913926efcd909d78267f2996e964e8effc67ebaf8c2a79171bac67e5d6a17ae0985f4257b2501aa2017d20eee Mar 17 18:33:34.976145 unknown[719]: fetched base config from "system" Mar 17 18:33:34.976158 unknown[719]: fetched user config from "qemu" Mar 17 18:33:34.976593 ignition[719]: fetch-offline: fetch-offline passed Mar 17 18:33:34.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.978150 systemd[1]: Finished ignition-fetch-offline.service. Mar 17 18:33:34.976640 ignition[719]: Ignition finished successfully Mar 17 18:33:34.979792 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Mar 17 18:33:34.980458 systemd[1]: Starting ignition-kargs.service... Mar 17 18:33:34.988621 ignition[738]: Ignition 2.14.0 Mar 17 18:33:34.988629 ignition[738]: Stage: kargs Mar 17 18:33:34.988705 ignition[738]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:33:34.988713 ignition[738]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:33:34.991080 systemd[1]: Finished ignition-kargs.service. Mar 17 18:33:34.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.989554 ignition[738]: kargs: kargs passed Mar 17 18:33:34.993552 systemd[1]: Starting ignition-disks.service... Mar 17 18:33:34.989586 ignition[738]: Ignition finished successfully Mar 17 18:33:34.999041 ignition[744]: Ignition 2.14.0 Mar 17 18:33:34.999051 ignition[744]: Stage: disks Mar 17 18:33:34.999124 ignition[744]: no configs at "/usr/lib/ignition/base.d" Mar 17 18:33:35.000527 systemd[1]: Finished ignition-disks.service. Mar 17 18:33:35.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:34.999133 ignition[744]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:33:35.002295 systemd[1]: Reached target initrd-root-device.target. Mar 17 18:33:34.999958 ignition[744]: disks: disks passed Mar 17 18:33:35.003885 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:33:34.999990 ignition[744]: Ignition finished successfully Mar 17 18:33:35.004712 systemd[1]: Reached target local-fs.target. Mar 17 18:33:35.006543 systemd[1]: Reached target sysinit.target. Mar 17 18:33:35.007298 systemd[1]: Reached target basic.target. Mar 17 18:33:35.008039 systemd[1]: Starting systemd-fsck-root.service... Mar 17 18:33:35.032728 systemd-fsck[752]: ROOT: clean, 623/553520 files, 56022/553472 blocks Mar 17 18:33:35.156329 systemd[1]: Finished systemd-fsck-root.service. Mar 17 18:33:35.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:35.158363 systemd[1]: Mounting sysroot.mount... Mar 17 18:33:35.167869 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Mar 17 18:33:35.168723 systemd[1]: Mounted sysroot.mount. Mar 17 18:33:35.170313 systemd[1]: Reached target initrd-root-fs.target. Mar 17 18:33:35.172189 systemd[1]: Mounting sysroot-usr.mount... Mar 17 18:33:35.174013 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Mar 17 18:33:35.174057 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Mar 17 18:33:35.174083 systemd[1]: Reached target ignition-diskful.target. Mar 17 18:33:35.177172 systemd[1]: Mounted sysroot-usr.mount. Mar 17 18:33:35.179419 systemd[1]: Starting initrd-setup-root.service... Mar 17 18:33:35.183588 initrd-setup-root[762]: cut: /sysroot/etc/passwd: No such file or directory Mar 17 18:33:35.187085 initrd-setup-root[770]: cut: /sysroot/etc/group: No such file or directory Mar 17 18:33:35.191836 initrd-setup-root[778]: cut: /sysroot/etc/shadow: No such file or directory Mar 17 18:33:35.194614 initrd-setup-root[786]: cut: /sysroot/etc/gshadow: No such file or directory Mar 17 18:33:35.222484 systemd[1]: Finished initrd-setup-root.service. Mar 17 18:33:35.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:35.224304 systemd[1]: Starting ignition-mount.service... Mar 17 18:33:35.225745 systemd[1]: Starting sysroot-boot.service... Mar 17 18:33:35.233975 bash[804]: umount: /sysroot/usr/share/oem: not mounted. Mar 17 18:33:35.241012 systemd[1]: Finished sysroot-boot.service. Mar 17 18:33:35.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:35.243621 ignition[805]: INFO : Ignition 2.14.0 Mar 17 18:33:35.243621 ignition[805]: INFO : Stage: mount Mar 17 18:33:35.245113 ignition[805]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:33:35.245113 ignition[805]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:33:35.247973 ignition[805]: INFO : mount: mount passed Mar 17 18:33:35.248747 ignition[805]: INFO : Ignition finished successfully Mar 17 18:33:35.250058 systemd[1]: Finished ignition-mount.service. Mar 17 18:33:35.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:35.694175 systemd[1]: Mounting sysroot-usr-share-oem.mount... Mar 17 18:33:35.699872 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (813) Mar 17 18:33:35.701916 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Mar 17 18:33:35.701938 kernel: BTRFS info (device vda6): using free space tree Mar 17 18:33:35.701950 kernel: BTRFS info (device vda6): has skinny extents Mar 17 18:33:35.706227 systemd[1]: Mounted sysroot-usr-share-oem.mount. Mar 17 18:33:35.708054 systemd[1]: Starting ignition-files.service... Mar 17 18:33:35.723659 ignition[833]: INFO : Ignition 2.14.0 Mar 17 18:33:35.723659 ignition[833]: INFO : Stage: files Mar 17 18:33:35.725615 ignition[833]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:33:35.725615 ignition[833]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:33:35.725615 ignition[833]: DEBUG : files: compiled without relabeling support, skipping Mar 17 18:33:35.729572 ignition[833]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Mar 17 18:33:35.729572 ignition[833]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Mar 17 18:33:35.743052 ignition[833]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Mar 17 18:33:35.744534 ignition[833]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Mar 17 18:33:35.746334 unknown[833]: wrote ssh authorized keys file for user: core Mar 17 18:33:35.747472 ignition[833]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Mar 17 18:33:35.749345 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Mar 17 18:33:35.749345 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Mar 17 18:33:35.810519 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Mar 17 18:33:35.982698 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Mar 17 18:33:35.982698 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:33:35.986716 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.32.0-x86-64.raw: attempt #1 Mar 17 18:33:36.205962 systemd-networkd[710]: eth0: Gained IPv6LL Mar 17 18:33:36.480484 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Mar 17 18:33:36.906875 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.0-x86-64.raw" Mar 17 18:33:36.906875 ignition[833]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Mar 17 18:33:36.910514 ignition[833]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Mar 17 18:33:36.923073 ignition[833]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Mar 17 18:33:36.923073 ignition[833]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Mar 17 18:33:36.923073 ignition[833]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Mar 17 18:33:36.960157 ignition[833]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Mar 17 18:33:36.963144 ignition[833]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Mar 17 18:33:36.964566 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:33:36.966269 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:33:36.967917 ignition[833]: INFO : files: files passed Mar 17 18:33:36.968664 ignition[833]: INFO : Ignition finished successfully Mar 17 18:33:36.970445 systemd[1]: Finished ignition-files.service. Mar 17 18:33:36.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:36.972065 systemd[1]: Starting initrd-setup-root-after-ignition.service... Mar 17 18:33:36.973036 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Mar 17 18:33:36.973562 systemd[1]: Starting ignition-quench.service... Mar 17 18:33:36.976920 systemd[1]: ignition-quench.service: Deactivated successfully. Mar 17 18:33:36.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:36.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:36.976987 systemd[1]: Finished ignition-quench.service. Mar 17 18:33:36.980898 initrd-setup-root-after-ignition[859]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Mar 17 18:33:36.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:36.984299 initrd-setup-root-after-ignition[861]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Mar 17 18:33:36.982351 systemd[1]: Finished initrd-setup-root-after-ignition.service. Mar 17 18:33:36.983407 systemd[1]: Reached target ignition-complete.target. Mar 17 18:33:36.984737 systemd[1]: Starting initrd-parse-etc.service... Mar 17 18:33:36.994891 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Mar 17 18:33:36.994962 systemd[1]: Finished initrd-parse-etc.service. Mar 17 18:33:36.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:36.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:36.999767 systemd[1]: Reached target initrd-fs.target. Mar 17 18:33:37.001258 systemd[1]: Reached target initrd.target. Mar 17 18:33:37.002045 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Mar 17 18:33:37.002573 systemd[1]: Starting dracut-pre-pivot.service... Mar 17 18:33:37.010757 systemd[1]: Finished dracut-pre-pivot.service. Mar 17 18:33:37.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.011471 systemd[1]: Starting initrd-cleanup.service... Mar 17 18:33:37.019376 systemd[1]: Stopped target nss-lookup.target. Mar 17 18:33:37.021098 systemd[1]: Stopped target remote-cryptsetup.target. Mar 17 18:33:37.022064 systemd[1]: Stopped target timers.target. Mar 17 18:33:37.023685 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Mar 17 18:33:37.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.023773 systemd[1]: Stopped dracut-pre-pivot.service. Mar 17 18:33:37.025298 systemd[1]: Stopped target initrd.target. Mar 17 18:33:37.026926 systemd[1]: Stopped target basic.target. Mar 17 18:33:37.028439 systemd[1]: Stopped target ignition-complete.target. Mar 17 18:33:37.030030 systemd[1]: Stopped target ignition-diskful.target. Mar 17 18:33:37.031862 systemd[1]: Stopped target initrd-root-device.target. Mar 17 18:33:37.033586 systemd[1]: Stopped target remote-fs.target. Mar 17 18:33:37.035211 systemd[1]: Stopped target remote-fs-pre.target. Mar 17 18:33:37.036931 systemd[1]: Stopped target sysinit.target. Mar 17 18:33:37.038447 systemd[1]: Stopped target local-fs.target. Mar 17 18:33:37.040022 systemd[1]: Stopped target local-fs-pre.target. Mar 17 18:33:37.041578 systemd[1]: Stopped target swap.target. Mar 17 18:33:37.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.043021 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Mar 17 18:33:37.043104 systemd[1]: Stopped dracut-pre-mount.service. Mar 17 18:33:37.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.044677 systemd[1]: Stopped target cryptsetup.target. Mar 17 18:33:37.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.046120 systemd[1]: dracut-initqueue.service: Deactivated successfully. Mar 17 18:33:37.046199 systemd[1]: Stopped dracut-initqueue.service. Mar 17 18:33:37.047961 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Mar 17 18:33:37.048054 systemd[1]: Stopped ignition-fetch-offline.service. Mar 17 18:33:37.049596 systemd[1]: Stopped target paths.target. Mar 17 18:33:37.051048 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Mar 17 18:33:37.054877 systemd[1]: Stopped systemd-ask-password-console.path. Mar 17 18:33:37.056467 systemd[1]: Stopped target slices.target. Mar 17 18:33:37.058269 systemd[1]: Stopped target sockets.target. Mar 17 18:33:37.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.059954 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Mar 17 18:33:37.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.060057 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Mar 17 18:33:37.066835 iscsid[715]: iscsid shutting down. Mar 17 18:33:37.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.061644 systemd[1]: ignition-files.service: Deactivated successfully. Mar 17 18:33:37.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.071711 ignition[874]: INFO : Ignition 2.14.0 Mar 17 18:33:37.071711 ignition[874]: INFO : Stage: umount Mar 17 18:33:37.071711 ignition[874]: INFO : no configs at "/usr/lib/ignition/base.d" Mar 17 18:33:37.071711 ignition[874]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Mar 17 18:33:37.071711 ignition[874]: INFO : umount: umount passed Mar 17 18:33:37.071711 ignition[874]: INFO : Ignition finished successfully Mar 17 18:33:37.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.061722 systemd[1]: Stopped ignition-files.service. Mar 17 18:33:37.063814 systemd[1]: Stopping ignition-mount.service... Mar 17 18:33:37.065121 systemd[1]: Stopping iscsid.service... Mar 17 18:33:37.066794 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Mar 17 18:33:37.066943 systemd[1]: Stopped kmod-static-nodes.service. Mar 17 18:33:37.067923 systemd[1]: Stopping sysroot-boot.service... Mar 17 18:33:37.069553 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Mar 17 18:33:37.069718 systemd[1]: Stopped systemd-udev-trigger.service. Mar 17 18:33:37.071640 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Mar 17 18:33:37.071736 systemd[1]: Stopped dracut-pre-trigger.service. Mar 17 18:33:37.088147 systemd[1]: sysroot-boot.mount: Deactivated successfully. Mar 17 18:33:37.089518 systemd[1]: iscsid.service: Deactivated successfully. Mar 17 18:33:37.096287 systemd[1]: Stopped iscsid.service. Mar 17 18:33:37.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.098011 systemd[1]: ignition-mount.service: Deactivated successfully. Mar 17 18:33:37.098983 systemd[1]: Stopped ignition-mount.service. Mar 17 18:33:37.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.100871 systemd[1]: iscsid.socket: Deactivated successfully. Mar 17 18:33:37.101729 systemd[1]: Closed iscsid.socket. Mar 17 18:33:37.103299 systemd[1]: ignition-disks.service: Deactivated successfully. Mar 17 18:33:37.103335 systemd[1]: Stopped ignition-disks.service. Mar 17 18:33:37.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.105719 systemd[1]: ignition-kargs.service: Deactivated successfully. Mar 17 18:33:37.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.105750 systemd[1]: Stopped ignition-kargs.service. Mar 17 18:33:37.107553 systemd[1]: ignition-setup.service: Deactivated successfully. Mar 17 18:33:37.107584 systemd[1]: Stopped ignition-setup.service. Mar 17 18:33:37.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.110737 systemd[1]: Stopping iscsiuio.service... Mar 17 18:33:37.112297 systemd[1]: initrd-cleanup.service: Deactivated successfully. Mar 17 18:33:37.117145 systemd[1]: Finished initrd-cleanup.service. Mar 17 18:33:37.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.118915 systemd[1]: iscsiuio.service: Deactivated successfully. Mar 17 18:33:37.119808 systemd[1]: Stopped iscsiuio.service. Mar 17 18:33:37.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.121977 systemd[1]: Stopped target network.target. Mar 17 18:33:37.123520 systemd[1]: iscsiuio.socket: Deactivated successfully. Mar 17 18:33:37.123550 systemd[1]: Closed iscsiuio.socket. Mar 17 18:33:37.125733 systemd[1]: Stopping systemd-networkd.service... Mar 17 18:33:37.127466 systemd[1]: Stopping systemd-resolved.service... Mar 17 18:33:37.135878 systemd-networkd[710]: eth0: DHCPv6 lease lost Mar 17 18:33:37.136939 systemd[1]: systemd-resolved.service: Deactivated successfully. Mar 17 18:33:37.137950 systemd[1]: Stopped systemd-resolved.service. Mar 17 18:33:37.148000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.149042 systemd[1]: systemd-networkd.service: Deactivated successfully. Mar 17 18:33:37.150062 systemd[1]: Stopped systemd-networkd.service. Mar 17 18:33:37.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.151000 audit: BPF prog-id=6 op=UNLOAD Mar 17 18:33:37.152147 systemd[1]: systemd-networkd.socket: Deactivated successfully. Mar 17 18:33:37.152177 systemd[1]: Closed systemd-networkd.socket. Mar 17 18:33:37.153000 audit: BPF prog-id=9 op=UNLOAD Mar 17 18:33:37.155216 systemd[1]: Stopping network-cleanup.service... Mar 17 18:33:37.156880 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Mar 17 18:33:37.156919 systemd[1]: Stopped parse-ip-for-networkd.service. Mar 17 18:33:37.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.166233 systemd[1]: systemd-sysctl.service: Deactivated successfully. Mar 17 18:33:37.166264 systemd[1]: Stopped systemd-sysctl.service. Mar 17 18:33:37.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.168776 systemd[1]: systemd-modules-load.service: Deactivated successfully. Mar 17 18:33:37.169741 systemd[1]: Stopped systemd-modules-load.service. Mar 17 18:33:37.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.171530 systemd[1]: Stopping systemd-udevd.service... Mar 17 18:33:37.174363 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Mar 17 18:33:37.177026 systemd[1]: systemd-udevd.service: Deactivated successfully. Mar 17 18:33:37.178200 systemd[1]: Stopped systemd-udevd.service. Mar 17 18:33:37.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.180164 systemd[1]: network-cleanup.service: Deactivated successfully. Mar 17 18:33:37.181190 systemd[1]: Stopped network-cleanup.service. Mar 17 18:33:37.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.183024 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Mar 17 18:33:37.183058 systemd[1]: Closed systemd-udevd-control.socket. Mar 17 18:33:37.185667 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Mar 17 18:33:37.185695 systemd[1]: Closed systemd-udevd-kernel.socket. Mar 17 18:33:37.187544 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Mar 17 18:33:37.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.187572 systemd[1]: Stopped dracut-pre-udev.service. Mar 17 18:33:37.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.189241 systemd[1]: dracut-cmdline.service: Deactivated successfully. Mar 17 18:33:37.190197 systemd[1]: Stopped dracut-cmdline.service. Mar 17 18:33:37.191790 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Mar 17 18:33:37.191819 systemd[1]: Stopped dracut-cmdline-ask.service. Mar 17 18:33:37.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.196306 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Mar 17 18:33:37.198050 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Mar 17 18:33:37.198090 systemd[1]: Stopped systemd-vconsole-setup.service. Mar 17 18:33:37.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.200995 systemd[1]: sysroot-boot.service: Deactivated successfully. Mar 17 18:33:37.201947 systemd[1]: Stopped sysroot-boot.service. Mar 17 18:33:37.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.203589 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Mar 17 18:33:37.208042 kernel: kauditd_printk_skb: 60 callbacks suppressed Mar 17 18:33:37.208061 kernel: audit: type=1131 audit(1742236417.203:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.203656 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Mar 17 18:33:37.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.209895 systemd[1]: Reached target initrd-switch-root.target. Mar 17 18:33:37.219031 kernel: audit: type=1130 audit(1742236417.208:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.219044 kernel: audit: type=1131 audit(1742236417.208:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.219023 systemd[1]: initrd-setup-root.service: Deactivated successfully. Mar 17 18:33:37.219059 systemd[1]: Stopped initrd-setup-root.service. Mar 17 18:33:37.224460 kernel: audit: type=1131 audit(1742236417.220:74): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.221392 systemd[1]: Starting initrd-switch-root.service... Mar 17 18:33:37.238737 systemd[1]: Switching root. Mar 17 18:33:37.260444 systemd-journald[198]: Journal stopped Mar 17 18:33:39.830497 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Mar 17 18:33:39.830541 kernel: SELinux: Class mctp_socket not defined in policy. Mar 17 18:33:39.830554 kernel: SELinux: Class anon_inode not defined in policy. Mar 17 18:33:39.830564 kernel: SELinux: the above unknown classes and permissions will be allowed Mar 17 18:33:39.830575 kernel: SELinux: policy capability network_peer_controls=1 Mar 17 18:33:39.830587 kernel: SELinux: policy capability open_perms=1 Mar 17 18:33:39.830597 kernel: SELinux: policy capability extended_socket_class=1 Mar 17 18:33:39.830606 kernel: SELinux: policy capability always_check_network=0 Mar 17 18:33:39.830615 kernel: SELinux: policy capability cgroup_seclabel=1 Mar 17 18:33:39.830625 kernel: SELinux: policy capability nnp_nosuid_transition=1 Mar 17 18:33:39.830634 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Mar 17 18:33:39.830644 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Mar 17 18:33:39.830654 kernel: audit: type=1403 audit(1742236417.316:75): auid=4294967295 ses=4294967295 lsm=selinux res=1 Mar 17 18:33:39.830668 systemd[1]: Successfully loaded SELinux policy in 37.200ms. Mar 17 18:33:39.830689 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.279ms. Mar 17 18:33:39.830701 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:33:39.830712 systemd[1]: Detected virtualization kvm. Mar 17 18:33:39.830722 systemd[1]: Detected architecture x86-64. Mar 17 18:33:39.830734 systemd[1]: Detected first boot. Mar 17 18:33:39.830745 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:33:39.830756 kernel: audit: type=1400 audit(1742236417.591:76): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:33:39.830767 kernel: audit: type=1400 audit(1742236417.591:77): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:33:39.830777 kernel: audit: type=1334 audit(1742236417.597:78): prog-id=10 op=LOAD Mar 17 18:33:39.830786 kernel: audit: type=1334 audit(1742236417.597:79): prog-id=10 op=UNLOAD Mar 17 18:33:39.830796 kernel: audit: type=1334 audit(1742236417.599:80): prog-id=11 op=LOAD Mar 17 18:33:39.830808 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Mar 17 18:33:39.830818 systemd[1]: Populated /etc with preset unit settings. Mar 17 18:33:39.830829 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:33:39.830869 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:33:39.830880 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:33:39.830891 systemd[1]: initrd-switch-root.service: Deactivated successfully. Mar 17 18:33:39.830903 systemd[1]: Stopped initrd-switch-root.service. Mar 17 18:33:39.830914 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Mar 17 18:33:39.830926 systemd[1]: Created slice system-addon\x2dconfig.slice. Mar 17 18:33:39.830936 systemd[1]: Created slice system-addon\x2drun.slice. Mar 17 18:33:39.830946 systemd[1]: Created slice system-getty.slice. Mar 17 18:33:39.830957 systemd[1]: Created slice system-modprobe.slice. Mar 17 18:33:39.830968 systemd[1]: Created slice system-serial\x2dgetty.slice. Mar 17 18:33:39.830979 systemd[1]: Created slice system-system\x2dcloudinit.slice. Mar 17 18:33:39.830992 systemd[1]: Created slice system-systemd\x2dfsck.slice. Mar 17 18:33:39.831003 systemd[1]: Created slice user.slice. Mar 17 18:33:39.831014 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:33:39.831025 systemd[1]: Started systemd-ask-password-wall.path. Mar 17 18:33:39.831035 systemd[1]: Set up automount boot.automount. Mar 17 18:33:39.831045 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Mar 17 18:33:39.831055 systemd[1]: Stopped target initrd-switch-root.target. Mar 17 18:33:39.831066 systemd[1]: Stopped target initrd-fs.target. Mar 17 18:33:39.831077 systemd[1]: Stopped target initrd-root-fs.target. Mar 17 18:33:39.831087 systemd[1]: Reached target integritysetup.target. Mar 17 18:33:39.831097 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:33:39.831109 systemd[1]: Reached target remote-fs.target. Mar 17 18:33:39.831120 systemd[1]: Reached target slices.target. Mar 17 18:33:39.831130 systemd[1]: Reached target swap.target. Mar 17 18:33:39.831141 systemd[1]: Reached target torcx.target. Mar 17 18:33:39.831151 systemd[1]: Reached target veritysetup.target. Mar 17 18:33:39.831162 systemd[1]: Listening on systemd-coredump.socket. Mar 17 18:33:39.831172 systemd[1]: Listening on systemd-initctl.socket. Mar 17 18:33:39.831182 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:33:39.831193 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:33:39.831205 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:33:39.831215 systemd[1]: Listening on systemd-userdbd.socket. Mar 17 18:33:39.831225 systemd[1]: Mounting dev-hugepages.mount... Mar 17 18:33:39.831236 systemd[1]: Mounting dev-mqueue.mount... Mar 17 18:33:39.831246 systemd[1]: Mounting media.mount... Mar 17 18:33:39.831260 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:39.831275 systemd[1]: Mounting sys-kernel-debug.mount... Mar 17 18:33:39.831285 systemd[1]: Mounting sys-kernel-tracing.mount... Mar 17 18:33:39.831295 systemd[1]: Mounting tmp.mount... Mar 17 18:33:39.831305 systemd[1]: Starting flatcar-tmpfiles.service... Mar 17 18:33:39.831318 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:33:39.831328 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:33:39.831339 systemd[1]: Starting modprobe@configfs.service... Mar 17 18:33:39.831349 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:33:39.831367 systemd[1]: Starting modprobe@drm.service... Mar 17 18:33:39.831378 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:33:39.831388 systemd[1]: Starting modprobe@fuse.service... Mar 17 18:33:39.831398 systemd[1]: Starting modprobe@loop.service... Mar 17 18:33:39.831410 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Mar 17 18:33:39.831421 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Mar 17 18:33:39.831432 systemd[1]: Stopped systemd-fsck-root.service. Mar 17 18:33:39.831442 kernel: loop: module loaded Mar 17 18:33:39.831452 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Mar 17 18:33:39.831462 systemd[1]: Stopped systemd-fsck-usr.service. Mar 17 18:33:39.831473 kernel: fuse: init (API version 7.34) Mar 17 18:33:39.831483 systemd[1]: Stopped systemd-journald.service. Mar 17 18:33:39.831493 systemd[1]: Starting systemd-journald.service... Mar 17 18:33:39.831504 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:33:39.831516 systemd[1]: Starting systemd-network-generator.service... Mar 17 18:33:39.831526 systemd[1]: Starting systemd-remount-fs.service... Mar 17 18:33:39.831537 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:33:39.831547 systemd[1]: verity-setup.service: Deactivated successfully. Mar 17 18:33:39.831557 systemd[1]: Stopped verity-setup.service. Mar 17 18:33:39.831568 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:39.831578 systemd[1]: Mounted dev-hugepages.mount. Mar 17 18:33:39.831591 systemd-journald[988]: Journal started Mar 17 18:33:39.831629 systemd-journald[988]: Runtime Journal (/run/log/journal/cd6d810c554e42b491fe339810f4cf5c) is 6.0M, max 48.5M, 42.5M free. Mar 17 18:33:37.316000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Mar 17 18:33:37.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:33:37.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:33:37.597000 audit: BPF prog-id=10 op=LOAD Mar 17 18:33:37.597000 audit: BPF prog-id=10 op=UNLOAD Mar 17 18:33:37.599000 audit: BPF prog-id=11 op=LOAD Mar 17 18:33:37.599000 audit: BPF prog-id=11 op=UNLOAD Mar 17 18:33:37.627000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Mar 17 18:33:37.627000 audit[907]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001558ac a1=c0000d8de0 a2=c0000e10c0 a3=32 items=0 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:37.627000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:33:37.634000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Mar 17 18:33:37.634000 audit[907]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c000155985 a2=1ed a3=0 items=2 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:37.634000 audit: CWD cwd="/" Mar 17 18:33:37.634000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:37.634000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:37.634000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:33:39.701000 audit: BPF prog-id=12 op=LOAD Mar 17 18:33:39.701000 audit: BPF prog-id=3 op=UNLOAD Mar 17 18:33:39.701000 audit: BPF prog-id=13 op=LOAD Mar 17 18:33:39.701000 audit: BPF prog-id=14 op=LOAD Mar 17 18:33:39.701000 audit: BPF prog-id=4 op=UNLOAD Mar 17 18:33:39.701000 audit: BPF prog-id=5 op=UNLOAD Mar 17 18:33:39.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.715000 audit: BPF prog-id=12 op=UNLOAD Mar 17 18:33:39.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.809000 audit: BPF prog-id=15 op=LOAD Mar 17 18:33:39.809000 audit: BPF prog-id=16 op=LOAD Mar 17 18:33:39.809000 audit: BPF prog-id=17 op=LOAD Mar 17 18:33:39.809000 audit: BPF prog-id=13 op=UNLOAD Mar 17 18:33:39.809000 audit: BPF prog-id=14 op=UNLOAD Mar 17 18:33:39.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.828000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Mar 17 18:33:39.828000 audit[988]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffc3baf0a80 a2=4000 a3=7ffc3baf0b1c items=0 ppid=1 pid=988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:39.828000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Mar 17 18:33:39.700825 systemd[1]: Queued start job for default target multi-user.target. Mar 17 18:33:39.832630 systemd[1]: Started systemd-journald.service. Mar 17 18:33:37.627153 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:33:39.700835 systemd[1]: Unnecessary job was removed for dev-vda6.device. Mar 17 18:33:37.627343 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:33:39.703420 systemd[1]: systemd-journald.service: Deactivated successfully. Mar 17 18:33:37.627358 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:33:37.627383 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Mar 17 18:33:37.627392 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="skipped missing lower profile" missing profile=oem Mar 17 18:33:37.627425 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Mar 17 18:33:37.627436 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Mar 17 18:33:37.627614 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Mar 17 18:33:37.627646 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:33:37.627659 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:33:39.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:37.628025 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Mar 17 18:33:37.628059 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Mar 17 18:33:37.628077 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Mar 17 18:33:37.628090 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Mar 17 18:33:37.628113 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Mar 17 18:33:39.833788 systemd[1]: Mounted dev-mqueue.mount. Mar 17 18:33:37.628124 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:37Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Mar 17 18:33:39.436004 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:39Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:33:39.436258 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:39Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:33:39.436381 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:39Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:33:39.436544 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:39Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:33:39.436590 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:39Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Mar 17 18:33:39.436640 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-03-17T18:33:39Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Mar 17 18:33:39.834760 systemd[1]: Mounted media.mount. Mar 17 18:33:39.835579 systemd[1]: Mounted sys-kernel-debug.mount. Mar 17 18:33:39.836483 systemd[1]: Mounted sys-kernel-tracing.mount. Mar 17 18:33:39.837424 systemd[1]: Mounted tmp.mount. Mar 17 18:33:39.838367 systemd[1]: Finished flatcar-tmpfiles.service. Mar 17 18:33:39.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.839460 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:33:39.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.840546 systemd[1]: modprobe@configfs.service: Deactivated successfully. Mar 17 18:33:39.840683 systemd[1]: Finished modprobe@configfs.service. Mar 17 18:33:39.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.841767 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:33:39.841910 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:33:39.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.842986 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:33:39.843137 systemd[1]: Finished modprobe@drm.service. Mar 17 18:33:39.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.844287 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:33:39.844443 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:33:39.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.845539 systemd[1]: modprobe@fuse.service: Deactivated successfully. Mar 17 18:33:39.845723 systemd[1]: Finished modprobe@fuse.service. Mar 17 18:33:39.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.846809 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:33:39.846918 systemd[1]: Finished modprobe@loop.service. Mar 17 18:33:39.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.847980 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:33:39.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.849185 systemd[1]: Finished systemd-network-generator.service. Mar 17 18:33:39.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.850403 systemd[1]: Finished systemd-remount-fs.service. Mar 17 18:33:39.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.851654 systemd[1]: Reached target network-pre.target. Mar 17 18:33:39.853469 systemd[1]: Mounting sys-fs-fuse-connections.mount... Mar 17 18:33:39.855295 systemd[1]: Mounting sys-kernel-config.mount... Mar 17 18:33:39.856222 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Mar 17 18:33:39.857572 systemd[1]: Starting systemd-hwdb-update.service... Mar 17 18:33:39.859372 systemd[1]: Starting systemd-journal-flush.service... Mar 17 18:33:39.860473 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:33:39.861361 systemd[1]: Starting systemd-random-seed.service... Mar 17 18:33:39.862570 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:33:39.863984 systemd-journald[988]: Time spent on flushing to /var/log/journal/cd6d810c554e42b491fe339810f4cf5c is 16.191ms for 1088 entries. Mar 17 18:33:39.863984 systemd-journald[988]: System Journal (/var/log/journal/cd6d810c554e42b491fe339810f4cf5c) is 8.0M, max 195.6M, 187.6M free. Mar 17 18:33:39.895292 systemd-journald[988]: Received client request to flush runtime journal. Mar 17 18:33:39.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:39.863507 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:33:39.866365 systemd[1]: Starting systemd-sysusers.service... Mar 17 18:33:39.868804 systemd[1]: Mounted sys-fs-fuse-connections.mount. Mar 17 18:33:39.896187 udevadm[1011]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Mar 17 18:33:39.870050 systemd[1]: Mounted sys-kernel-config.mount. Mar 17 18:33:39.874676 systemd[1]: Finished systemd-random-seed.service. Mar 17 18:33:39.876035 systemd[1]: Reached target first-boot-complete.target. Mar 17 18:33:39.880604 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:33:39.881769 systemd[1]: Finished systemd-sysusers.service. Mar 17 18:33:39.883619 systemd[1]: Starting systemd-udev-settle.service... Mar 17 18:33:39.886913 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:33:39.896536 systemd[1]: Finished systemd-journal-flush.service. Mar 17 18:33:39.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.288991 systemd[1]: Finished systemd-hwdb-update.service. Mar 17 18:33:40.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.290000 audit: BPF prog-id=18 op=LOAD Mar 17 18:33:40.290000 audit: BPF prog-id=19 op=LOAD Mar 17 18:33:40.290000 audit: BPF prog-id=7 op=UNLOAD Mar 17 18:33:40.290000 audit: BPF prog-id=8 op=UNLOAD Mar 17 18:33:40.291666 systemd[1]: Starting systemd-udevd.service... Mar 17 18:33:40.306274 systemd-udevd[1013]: Using default interface naming scheme 'v252'. Mar 17 18:33:40.318487 systemd[1]: Started systemd-udevd.service. Mar 17 18:33:40.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.320000 audit: BPF prog-id=20 op=LOAD Mar 17 18:33:40.322384 systemd[1]: Starting systemd-networkd.service... Mar 17 18:33:40.329000 audit: BPF prog-id=21 op=LOAD Mar 17 18:33:40.329000 audit: BPF prog-id=22 op=LOAD Mar 17 18:33:40.329000 audit: BPF prog-id=23 op=LOAD Mar 17 18:33:40.331198 systemd[1]: Starting systemd-userdbd.service... Mar 17 18:33:40.339787 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Mar 17 18:33:40.357510 systemd[1]: Started systemd-userdbd.service. Mar 17 18:33:40.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.376544 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:33:40.379872 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Mar 17 18:33:40.385862 kernel: ACPI: button: Power Button [PWRF] Mar 17 18:33:40.396000 audit[1024]: AVC avc: denied { confidentiality } for pid=1024 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Mar 17 18:33:40.396000 audit[1024]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=555fae22c0f0 a1=338ac a2=7f730bfbebc5 a3=5 items=110 ppid=1013 pid=1024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:40.396000 audit: CWD cwd="/" Mar 17 18:33:40.396000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=1 name=(null) inode=15272 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=2 name=(null) inode=15272 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=3 name=(null) inode=15273 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=4 name=(null) inode=15272 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=5 name=(null) inode=15274 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=6 name=(null) inode=15272 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=7 name=(null) inode=15275 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=8 name=(null) inode=15275 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=9 name=(null) inode=15276 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=10 name=(null) inode=15275 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=11 name=(null) inode=15277 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=12 name=(null) inode=15275 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=13 name=(null) inode=15278 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=14 name=(null) inode=15275 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=15 name=(null) inode=15279 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=16 name=(null) inode=15275 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=17 name=(null) inode=15280 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=18 name=(null) inode=15272 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.411996 systemd-networkd[1028]: lo: Link UP Mar 17 18:33:40.412001 systemd-networkd[1028]: lo: Gained carrier Mar 17 18:33:40.396000 audit: PATH item=19 name=(null) inode=15281 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=20 name=(null) inode=15281 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=21 name=(null) inode=15282 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.412518 systemd-networkd[1028]: Enumeration completed Mar 17 18:33:40.396000 audit: PATH item=22 name=(null) inode=15281 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.412614 systemd[1]: Started systemd-networkd.service. Mar 17 18:33:40.396000 audit: PATH item=23 name=(null) inode=15283 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=24 name=(null) inode=15281 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=25 name=(null) inode=15284 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=26 name=(null) inode=15281 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=27 name=(null) inode=15285 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=28 name=(null) inode=15281 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=29 name=(null) inode=15286 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=30 name=(null) inode=15272 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=31 name=(null) inode=15287 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=32 name=(null) inode=15287 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=33 name=(null) inode=15288 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=34 name=(null) inode=15287 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=35 name=(null) inode=15289 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=36 name=(null) inode=15287 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=37 name=(null) inode=15290 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.396000 audit: PATH item=38 name=(null) inode=15287 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=39 name=(null) inode=15291 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=40 name=(null) inode=15287 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.414328 systemd-networkd[1028]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:33:40.396000 audit: PATH item=41 name=(null) inode=15292 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=42 name=(null) inode=15272 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=43 name=(null) inode=15293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=44 name=(null) inode=15293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=45 name=(null) inode=15294 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=46 name=(null) inode=15293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=47 name=(null) inode=15295 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=48 name=(null) inode=15293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=49 name=(null) inode=15296 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=50 name=(null) inode=15293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=51 name=(null) inode=15297 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=52 name=(null) inode=15293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=53 name=(null) inode=15298 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.415622 systemd-networkd[1028]: eth0: Link UP Mar 17 18:33:40.415628 systemd-networkd[1028]: eth0: Gained carrier Mar 17 18:33:40.396000 audit: PATH item=55 name=(null) inode=15299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=56 name=(null) inode=15299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=57 name=(null) inode=15300 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=58 name=(null) inode=15299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=59 name=(null) inode=15301 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=60 name=(null) inode=15299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=61 name=(null) inode=15302 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=62 name=(null) inode=15302 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=63 name=(null) inode=15303 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=64 name=(null) inode=15302 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=65 name=(null) inode=15304 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=66 name=(null) inode=15302 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=67 name=(null) inode=15305 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=68 name=(null) inode=15302 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=69 name=(null) inode=15306 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=70 name=(null) inode=15302 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=71 name=(null) inode=15307 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=72 name=(null) inode=15299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=73 name=(null) inode=15308 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=74 name=(null) inode=15308 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=75 name=(null) inode=15309 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=76 name=(null) inode=15308 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=77 name=(null) inode=15310 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=78 name=(null) inode=15308 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=79 name=(null) inode=15311 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=80 name=(null) inode=15308 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=81 name=(null) inode=15312 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=82 name=(null) inode=15308 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=83 name=(null) inode=15313 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=84 name=(null) inode=15299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=85 name=(null) inode=15314 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=86 name=(null) inode=15314 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=87 name=(null) inode=15315 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=88 name=(null) inode=15314 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=89 name=(null) inode=15316 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=90 name=(null) inode=15314 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=91 name=(null) inode=15317 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=92 name=(null) inode=15314 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=93 name=(null) inode=15318 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=94 name=(null) inode=15314 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=95 name=(null) inode=15319 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=96 name=(null) inode=15299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=97 name=(null) inode=15320 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=98 name=(null) inode=15320 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=99 name=(null) inode=15321 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=100 name=(null) inode=15320 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=101 name=(null) inode=15322 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=102 name=(null) inode=15320 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=103 name=(null) inode=15323 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=104 name=(null) inode=15320 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=105 name=(null) inode=15324 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=106 name=(null) inode=15320 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=107 name=(null) inode=15325 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PATH item=109 name=(null) inode=15326 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:33:40.396000 audit: PROCTITLE proctitle="(udev-worker)" Mar 17 18:33:40.429634 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Mar 17 18:33:40.431178 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Mar 17 18:33:40.431287 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Mar 17 18:33:40.433978 systemd-networkd[1028]: eth0: DHCPv4 address 10.0.0.17/16, gateway 10.0.0.1 acquired from 10.0.0.1 Mar 17 18:33:40.440858 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Mar 17 18:33:40.443857 kernel: mousedev: PS/2 mouse device common for all mice Mar 17 18:33:40.491346 kernel: kvm: Nested Virtualization enabled Mar 17 18:33:40.491424 kernel: SVM: kvm: Nested Paging enabled Mar 17 18:33:40.491438 kernel: SVM: Virtual VMLOAD VMSAVE supported Mar 17 18:33:40.492574 kernel: SVM: Virtual GIF supported Mar 17 18:33:40.506868 kernel: EDAC MC: Ver: 3.0.0 Mar 17 18:33:40.535181 systemd[1]: Finished systemd-udev-settle.service. Mar 17 18:33:40.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.537141 systemd[1]: Starting lvm2-activation-early.service... Mar 17 18:33:40.544177 lvm[1048]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:33:40.561478 systemd[1]: Finished lvm2-activation-early.service. Mar 17 18:33:40.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.562511 systemd[1]: Reached target cryptsetup.target. Mar 17 18:33:40.564167 systemd[1]: Starting lvm2-activation.service... Mar 17 18:33:40.567266 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:33:40.593702 systemd[1]: Finished lvm2-activation.service. Mar 17 18:33:40.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.594664 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:33:40.595571 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Mar 17 18:33:40.595595 systemd[1]: Reached target local-fs.target. Mar 17 18:33:40.596444 systemd[1]: Reached target machines.target. Mar 17 18:33:40.598097 systemd[1]: Starting ldconfig.service... Mar 17 18:33:40.599109 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:33:40.599144 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:33:40.599917 systemd[1]: Starting systemd-boot-update.service... Mar 17 18:33:40.601691 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Mar 17 18:33:40.604344 systemd[1]: Starting systemd-machine-id-commit.service... Mar 17 18:33:40.606781 systemd[1]: Starting systemd-sysext.service... Mar 17 18:33:40.607092 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1051 (bootctl) Mar 17 18:33:40.607881 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Mar 17 18:33:40.609543 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Mar 17 18:33:40.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.618326 systemd[1]: Unmounting usr-share-oem.mount... Mar 17 18:33:40.621992 systemd[1]: usr-share-oem.mount: Deactivated successfully. Mar 17 18:33:40.622119 systemd[1]: Unmounted usr-share-oem.mount. Mar 17 18:33:40.629865 kernel: loop0: detected capacity change from 0 to 218376 Mar 17 18:33:40.638488 systemd-fsck[1058]: fsck.fat 4.2 (2021-01-31) Mar 17 18:33:40.638488 systemd-fsck[1058]: /dev/vda1: 789 files, 119299/258078 clusters Mar 17 18:33:40.640055 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Mar 17 18:33:40.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:40.643136 systemd[1]: Mounting boot.mount... Mar 17 18:33:40.654030 systemd[1]: Mounted boot.mount. Mar 17 18:33:40.665171 systemd[1]: Finished systemd-boot-update.service. Mar 17 18:33:40.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.027885 ldconfig[1050]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Mar 17 18:33:41.033374 systemd[1]: Finished ldconfig.service. Mar 17 18:33:41.034619 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Mar 17 18:33:41.035413 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Mar 17 18:33:41.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.035914 systemd[1]: Finished systemd-machine-id-commit.service. Mar 17 18:33:41.048872 kernel: loop1: detected capacity change from 0 to 218376 Mar 17 18:33:41.052765 (sd-sysext)[1064]: Using extensions 'kubernetes'. Mar 17 18:33:41.053062 (sd-sysext)[1064]: Merged extensions into '/usr'. Mar 17 18:33:41.067097 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.068205 systemd[1]: Mounting usr-share-oem.mount... Mar 17 18:33:41.069092 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.070077 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:33:41.071752 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:33:41.073420 systemd[1]: Starting modprobe@loop.service... Mar 17 18:33:41.074173 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.074285 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:33:41.074397 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.076641 systemd[1]: Mounted usr-share-oem.mount. Mar 17 18:33:41.077651 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:33:41.077751 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:33:41.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.078906 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:33:41.079002 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:33:41.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.080167 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:33:41.080260 systemd[1]: Finished modprobe@loop.service. Mar 17 18:33:41.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.081408 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:33:41.081497 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.082293 systemd[1]: Finished systemd-sysext.service. Mar 17 18:33:41.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.084038 systemd[1]: Starting ensure-sysext.service... Mar 17 18:33:41.085542 systemd[1]: Starting systemd-tmpfiles-setup.service... Mar 17 18:33:41.090822 systemd[1]: Reloading. Mar 17 18:33:41.097212 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Mar 17 18:33:41.099048 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Mar 17 18:33:41.102119 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Mar 17 18:33:41.145100 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-03-17T18:33:41Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:33:41.145410 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-03-17T18:33:41Z" level=info msg="torcx already run" Mar 17 18:33:41.202719 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:33:41.202735 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:33:41.220689 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:33:41.274000 audit: BPF prog-id=24 op=LOAD Mar 17 18:33:41.274000 audit: BPF prog-id=21 op=UNLOAD Mar 17 18:33:41.274000 audit: BPF prog-id=25 op=LOAD Mar 17 18:33:41.274000 audit: BPF prog-id=26 op=LOAD Mar 17 18:33:41.274000 audit: BPF prog-id=22 op=UNLOAD Mar 17 18:33:41.274000 audit: BPF prog-id=23 op=UNLOAD Mar 17 18:33:41.275000 audit: BPF prog-id=27 op=LOAD Mar 17 18:33:41.276000 audit: BPF prog-id=28 op=LOAD Mar 17 18:33:41.276000 audit: BPF prog-id=18 op=UNLOAD Mar 17 18:33:41.276000 audit: BPF prog-id=19 op=UNLOAD Mar 17 18:33:41.277000 audit: BPF prog-id=29 op=LOAD Mar 17 18:33:41.277000 audit: BPF prog-id=15 op=UNLOAD Mar 17 18:33:41.277000 audit: BPF prog-id=30 op=LOAD Mar 17 18:33:41.277000 audit: BPF prog-id=31 op=LOAD Mar 17 18:33:41.277000 audit: BPF prog-id=16 op=UNLOAD Mar 17 18:33:41.277000 audit: BPF prog-id=17 op=UNLOAD Mar 17 18:33:41.278000 audit: BPF prog-id=32 op=LOAD Mar 17 18:33:41.278000 audit: BPF prog-id=20 op=UNLOAD Mar 17 18:33:41.281073 systemd[1]: Finished systemd-tmpfiles-setup.service. Mar 17 18:33:41.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.285458 systemd[1]: Starting audit-rules.service... Mar 17 18:33:41.287133 systemd[1]: Starting clean-ca-certificates.service... Mar 17 18:33:41.289142 systemd[1]: Starting systemd-journal-catalog-update.service... Mar 17 18:33:41.290000 audit: BPF prog-id=33 op=LOAD Mar 17 18:33:41.291928 systemd[1]: Starting systemd-resolved.service... Mar 17 18:33:41.292000 audit: BPF prog-id=34 op=LOAD Mar 17 18:33:41.294025 systemd[1]: Starting systemd-timesyncd.service... Mar 17 18:33:41.295604 systemd[1]: Starting systemd-update-utmp.service... Mar 17 18:33:41.296909 systemd[1]: Finished clean-ca-certificates.service. Mar 17 18:33:41.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.299986 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:33:41.301556 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.301885 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.302941 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:33:41.303000 audit[1144]: SYSTEM_BOOT pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.305657 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:33:41.307301 systemd[1]: Starting modprobe@loop.service... Mar 17 18:33:41.308120 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.308220 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:33:41.308331 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:33:41.308407 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.309251 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:33:41.309365 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:33:41.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.310677 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:33:41.310775 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:33:41.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.312103 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:33:41.312203 systemd[1]: Finished modprobe@loop.service. Mar 17 18:33:41.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:41.312000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Mar 17 18:33:41.312000 audit[1156]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe65832610 a2=420 a3=0 items=0 ppid=1133 pid=1156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:41.312000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Mar 17 18:33:41.313889 augenrules[1156]: No rules Mar 17 18:33:41.314902 systemd[1]: Finished audit-rules.service. Mar 17 18:33:41.316035 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:33:41.316175 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.317239 systemd[1]: Finished systemd-update-utmp.service. Mar 17 18:33:41.319270 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.319448 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.320331 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:33:41.321765 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:33:41.323328 systemd[1]: Starting modprobe@loop.service... Mar 17 18:33:41.324450 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.324542 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:33:41.324623 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:33:41.324693 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.325512 systemd[1]: Finished systemd-journal-catalog-update.service. Mar 17 18:33:41.326794 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:33:41.326902 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:33:41.328040 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:33:41.328128 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:33:41.329245 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:33:41.329341 systemd[1]: Finished modprobe@loop.service. Mar 17 18:33:41.330416 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:33:41.330497 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.331465 systemd[1]: Starting systemd-update-done.service... Mar 17 18:33:41.334489 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.334672 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.336083 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:33:41.337876 systemd[1]: Starting modprobe@drm.service... Mar 17 18:33:41.339593 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:33:41.341199 systemd[1]: Starting modprobe@loop.service... Mar 17 18:33:41.341963 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.342052 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:33:41.343058 systemd[1]: Starting systemd-networkd-wait-online.service... Mar 17 18:33:41.344180 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:33:41.344291 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Mar 17 18:33:41.345222 systemd[1]: Finished systemd-update-done.service. Mar 17 18:33:41.346552 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:33:41.346654 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:33:41.347749 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:33:41.347853 systemd[1]: Finished modprobe@drm.service. Mar 17 18:33:41.348939 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:33:41.349028 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:33:41.350212 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:33:41.350305 systemd[1]: Finished modprobe@loop.service. Mar 17 18:33:41.351535 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:33:41.351615 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.351708 systemd-resolved[1140]: Positive Trust Anchors: Mar 17 18:33:41.351716 systemd-resolved[1140]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:33:41.351750 systemd-resolved[1140]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:33:41.352882 systemd[1]: Finished ensure-sysext.service. Mar 17 18:33:41.359583 systemd-resolved[1140]: Defaulting to hostname 'linux'. Mar 17 18:33:41.361024 systemd[1]: Started systemd-resolved.service. Mar 17 18:33:41.361910 systemd[1]: Reached target network.target. Mar 17 18:33:41.362688 systemd[1]: Reached target nss-lookup.target. Mar 17 18:33:41.371467 systemd[1]: Started systemd-timesyncd.service. Mar 17 18:33:41.372376 systemd[1]: Reached target sysinit.target. Mar 17 18:33:41.373223 systemd[1]: Started motdgen.path. Mar 17 18:33:41.373937 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Mar 17 18:33:41.853363 systemd-resolved[1140]: Clock change detected. Flushing caches. Mar 17 18:33:41.853406 systemd-timesyncd[1143]: Contacted time server 10.0.0.1:123 (10.0.0.1). Mar 17 18:33:41.853446 systemd-timesyncd[1143]: Initial clock synchronization to Mon 2025-03-17 18:33:41.853329 UTC. Mar 17 18:33:41.854356 systemd[1]: Started systemd-tmpfiles-clean.timer. Mar 17 18:33:41.855304 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Mar 17 18:33:41.855336 systemd[1]: Reached target paths.target. Mar 17 18:33:41.856140 systemd[1]: Reached target time-set.target. Mar 17 18:33:41.857144 systemd[1]: Started logrotate.timer. Mar 17 18:33:41.857984 systemd[1]: Started mdadm.timer. Mar 17 18:33:41.858722 systemd[1]: Reached target timers.target. Mar 17 18:33:41.859790 systemd[1]: Listening on dbus.socket. Mar 17 18:33:41.861381 systemd[1]: Starting docker.socket... Mar 17 18:33:41.864088 systemd[1]: Listening on sshd.socket. Mar 17 18:33:41.864971 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:33:41.865373 systemd[1]: Listening on docker.socket. Mar 17 18:33:41.866370 systemd[1]: Reached target sockets.target. Mar 17 18:33:41.867209 systemd[1]: Reached target basic.target. Mar 17 18:33:41.868055 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.868088 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:33:41.868869 systemd[1]: Starting containerd.service... Mar 17 18:33:41.870437 systemd[1]: Starting dbus.service... Mar 17 18:33:41.871903 systemd[1]: Starting enable-oem-cloudinit.service... Mar 17 18:33:41.873630 systemd[1]: Starting extend-filesystems.service... Mar 17 18:33:41.874650 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Mar 17 18:33:41.876228 jq[1176]: false Mar 17 18:33:41.875506 systemd[1]: Starting motdgen.service... Mar 17 18:33:41.877115 systemd[1]: Starting prepare-helm.service... Mar 17 18:33:41.879381 systemd[1]: Starting ssh-key-proc-cmdline.service... Mar 17 18:33:41.881204 systemd[1]: Starting sshd-keygen.service... Mar 17 18:33:41.883701 extend-filesystems[1177]: Found loop1 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found sr0 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda1 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda2 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda3 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found usr Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda4 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda6 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda7 Mar 17 18:33:41.883701 extend-filesystems[1177]: Found vda9 Mar 17 18:33:41.883701 extend-filesystems[1177]: Checking size of /dev/vda9 Mar 17 18:33:41.919391 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Mar 17 18:33:41.919505 extend-filesystems[1177]: Resized partition /dev/vda9 Mar 17 18:33:41.889596 dbus-daemon[1175]: [system] SELinux support is enabled Mar 17 18:33:41.885069 systemd[1]: Starting systemd-logind.service... Mar 17 18:33:41.921241 extend-filesystems[1200]: resize2fs 1.46.5 (30-Dec-2021) Mar 17 18:33:41.890889 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:33:41.923167 update_engine[1196]: I0317 18:33:41.919561 1196 main.cc:92] Flatcar Update Engine starting Mar 17 18:33:41.923167 update_engine[1196]: I0317 18:33:41.921373 1196 update_check_scheduler.cc:74] Next update check in 8m16s Mar 17 18:33:41.890933 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Mar 17 18:33:41.923402 jq[1201]: true Mar 17 18:33:41.891883 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Mar 17 18:33:41.892436 systemd[1]: Starting update-engine.service... Mar 17 18:33:41.904032 systemd[1]: Starting update-ssh-keys-after-ignition.service... Mar 17 18:33:41.905716 systemd[1]: Started dbus.service. Mar 17 18:33:41.909883 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Mar 17 18:33:41.910035 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Mar 17 18:33:41.912916 systemd[1]: motdgen.service: Deactivated successfully. Mar 17 18:33:41.913199 systemd[1]: Finished motdgen.service. Mar 17 18:33:41.920594 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Mar 17 18:33:41.920733 systemd[1]: Finished ssh-key-proc-cmdline.service. Mar 17 18:33:41.927927 jq[1205]: true Mar 17 18:33:41.933113 tar[1203]: linux-amd64/LICENSE Mar 17 18:33:41.933113 tar[1203]: linux-amd64/helm Mar 17 18:33:41.934717 systemd[1]: Started update-engine.service. Mar 17 18:33:41.937302 systemd[1]: Started locksmithd.service. Mar 17 18:33:41.938235 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Mar 17 18:33:41.938268 systemd[1]: Reached target system-config.target. Mar 17 18:33:41.939205 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Mar 17 18:33:41.939227 systemd[1]: Reached target user-config.target. Mar 17 18:33:41.949106 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Mar 17 18:33:41.974149 env[1206]: time="2025-03-17T18:33:41.974103381Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Mar 17 18:33:41.974557 systemd-logind[1191]: Watching system buttons on /dev/input/event1 (Power Button) Mar 17 18:33:41.974580 systemd-logind[1191]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Mar 17 18:33:41.975274 systemd-logind[1191]: New seat seat0. Mar 17 18:33:41.977539 systemd[1]: Started systemd-logind.service. Mar 17 18:33:41.978676 extend-filesystems[1200]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Mar 17 18:33:41.978676 extend-filesystems[1200]: old_desc_blocks = 1, new_desc_blocks = 1 Mar 17 18:33:41.978676 extend-filesystems[1200]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Mar 17 18:33:41.983713 extend-filesystems[1177]: Resized filesystem in /dev/vda9 Mar 17 18:33:41.978921 systemd[1]: extend-filesystems.service: Deactivated successfully. Mar 17 18:33:41.984697 bash[1227]: Updated "/home/core/.ssh/authorized_keys" Mar 17 18:33:41.979056 systemd[1]: Finished extend-filesystems.service. Mar 17 18:33:41.984638 systemd[1]: Finished update-ssh-keys-after-ignition.service. Mar 17 18:33:41.997907 env[1206]: time="2025-03-17T18:33:41.997867408Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Mar 17 18:33:41.998183 env[1206]: time="2025-03-17T18:33:41.998166068Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:33:41.999344 env[1206]: time="2025-03-17T18:33:41.999320012Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.179-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:33:41.999429 env[1206]: time="2025-03-17T18:33:41.999411213Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:33:41.999685 env[1206]: time="2025-03-17T18:33:41.999665650Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:33:41.999785 env[1206]: time="2025-03-17T18:33:41.999765437Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Mar 17 18:33:41.999860 env[1206]: time="2025-03-17T18:33:41.999840578Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Mar 17 18:33:41.999935 env[1206]: time="2025-03-17T18:33:41.999917001Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Mar 17 18:33:42.000062 env[1206]: time="2025-03-17T18:33:42.000044841Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:33:42.000340 env[1206]: time="2025-03-17T18:33:42.000323603Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:33:42.000516 env[1206]: time="2025-03-17T18:33:42.000498071Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:33:42.000598 env[1206]: time="2025-03-17T18:33:42.000579864Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Mar 17 18:33:42.000729 env[1206]: time="2025-03-17T18:33:42.000712042Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Mar 17 18:33:42.000808 env[1206]: time="2025-03-17T18:33:42.000790379Z" level=info msg="metadata content store policy set" policy=shared Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005823195Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005848783Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005861126Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005898436Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005911661Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005924155Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005933993Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.005990078Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.006002592Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.006013993Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.006026687Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.006037267Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.006132836Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Mar 17 18:33:42.008068 env[1206]: time="2025-03-17T18:33:42.006194251Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006437016Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006458887Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006470689Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006534258Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006555138Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006566278Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006576267Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006586897Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006596986Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006607706Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006629407Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006642582Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006739273Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006751897Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008428 env[1206]: time="2025-03-17T18:33:42.006763909Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008734 env[1206]: time="2025-03-17T18:33:42.006773687Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Mar 17 18:33:42.008734 env[1206]: time="2025-03-17T18:33:42.006786341Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Mar 17 18:33:42.008734 env[1206]: time="2025-03-17T18:33:42.006796490Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Mar 17 18:33:42.008734 env[1206]: time="2025-03-17T18:33:42.006814975Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Mar 17 18:33:42.008734 env[1206]: time="2025-03-17T18:33:42.006846444Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Mar 17 18:33:42.008836 env[1206]: time="2025-03-17T18:33:42.007024648Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Mar 17 18:33:42.009006 locksmithd[1215]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Mar 17 18:33:42.010718 env[1206]: time="2025-03-17T18:33:42.010260585Z" level=info msg="Connect containerd service" Mar 17 18:33:42.010718 env[1206]: time="2025-03-17T18:33:42.010305149Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Mar 17 18:33:42.015351 env[1206]: time="2025-03-17T18:33:42.010934038Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:33:42.015351 env[1206]: time="2025-03-17T18:33:42.011136428Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Mar 17 18:33:42.015351 env[1206]: time="2025-03-17T18:33:42.011165342Z" level=info msg=serving... address=/run/containerd/containerd.sock Mar 17 18:33:42.015351 env[1206]: time="2025-03-17T18:33:42.011344347Z" level=info msg="containerd successfully booted in 0.050538s" Mar 17 18:33:42.011247 systemd[1]: Started containerd.service. Mar 17 18:33:42.016613 env[1206]: time="2025-03-17T18:33:42.016558384Z" level=info msg="Start subscribing containerd event" Mar 17 18:33:42.016808 env[1206]: time="2025-03-17T18:33:42.016788004Z" level=info msg="Start recovering state" Mar 17 18:33:42.016948 env[1206]: time="2025-03-17T18:33:42.016930501Z" level=info msg="Start event monitor" Mar 17 18:33:42.017034 env[1206]: time="2025-03-17T18:33:42.017015821Z" level=info msg="Start snapshots syncer" Mar 17 18:33:42.017127 env[1206]: time="2025-03-17T18:33:42.017108275Z" level=info msg="Start cni network conf syncer for default" Mar 17 18:33:42.017217 env[1206]: time="2025-03-17T18:33:42.017195037Z" level=info msg="Start streaming server" Mar 17 18:33:42.338167 tar[1203]: linux-amd64/README.md Mar 17 18:33:42.342343 systemd[1]: Finished prepare-helm.service. Mar 17 18:33:42.381243 systemd-networkd[1028]: eth0: Gained IPv6LL Mar 17 18:33:42.383271 systemd[1]: Finished systemd-networkd-wait-online.service. Mar 17 18:33:42.384583 systemd[1]: Reached target network-online.target. Mar 17 18:33:42.386657 systemd[1]: Starting kubelet.service... Mar 17 18:33:42.758391 sshd_keygen[1195]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Mar 17 18:33:42.779045 systemd[1]: Finished sshd-keygen.service. Mar 17 18:33:42.781656 systemd[1]: Starting issuegen.service... Mar 17 18:33:42.785814 systemd[1]: issuegen.service: Deactivated successfully. Mar 17 18:33:42.785966 systemd[1]: Finished issuegen.service. Mar 17 18:33:42.788124 systemd[1]: Starting systemd-user-sessions.service... Mar 17 18:33:42.794468 systemd[1]: Finished systemd-user-sessions.service. Mar 17 18:33:42.796420 systemd[1]: Started getty@tty1.service. Mar 17 18:33:42.798062 systemd[1]: Started serial-getty@ttyS0.service. Mar 17 18:33:42.799113 systemd[1]: Reached target getty.target. Mar 17 18:33:42.990052 systemd[1]: Started kubelet.service. Mar 17 18:33:42.991273 systemd[1]: Reached target multi-user.target. Mar 17 18:33:42.993253 systemd[1]: Starting systemd-update-utmp-runlevel.service... Mar 17 18:33:42.999929 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Mar 17 18:33:43.000040 systemd[1]: Finished systemd-update-utmp-runlevel.service. Mar 17 18:33:43.001306 systemd[1]: Startup finished in 598ms (kernel) + 4.574s (initrd) + 5.244s (userspace) = 10.418s. Mar 17 18:33:43.375522 kubelet[1256]: E0317 18:33:43.375466 1256 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:33:43.376893 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:33:43.377004 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:33:51.096538 systemd[1]: Created slice system-sshd.slice. Mar 17 18:33:51.097530 systemd[1]: Started sshd@0-10.0.0.17:22-10.0.0.1:37310.service. Mar 17 18:33:51.136251 sshd[1265]: Accepted publickey for core from 10.0.0.1 port 37310 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:33:51.137517 sshd[1265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.146250 systemd-logind[1191]: New session 1 of user core. Mar 17 18:33:51.147296 systemd[1]: Created slice user-500.slice. Mar 17 18:33:51.148329 systemd[1]: Starting user-runtime-dir@500.service... Mar 17 18:33:51.157008 systemd[1]: Finished user-runtime-dir@500.service. Mar 17 18:33:51.158377 systemd[1]: Starting user@500.service... Mar 17 18:33:51.161168 (systemd)[1268]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.247977 systemd[1268]: Queued start job for default target default.target. Mar 17 18:33:51.248432 systemd[1268]: Reached target paths.target. Mar 17 18:33:51.248457 systemd[1268]: Reached target sockets.target. Mar 17 18:33:51.248473 systemd[1268]: Reached target timers.target. Mar 17 18:33:51.248487 systemd[1268]: Reached target basic.target. Mar 17 18:33:51.248530 systemd[1268]: Reached target default.target. Mar 17 18:33:51.248559 systemd[1268]: Startup finished in 81ms. Mar 17 18:33:51.248666 systemd[1]: Started user@500.service. Mar 17 18:33:51.249818 systemd[1]: Started session-1.scope. Mar 17 18:33:51.301598 systemd[1]: Started sshd@1-10.0.0.17:22-10.0.0.1:37312.service. Mar 17 18:33:51.339696 sshd[1277]: Accepted publickey for core from 10.0.0.1 port 37312 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:33:51.341050 sshd[1277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.345065 systemd-logind[1191]: New session 2 of user core. Mar 17 18:33:51.346366 systemd[1]: Started session-2.scope. Mar 17 18:33:51.400488 sshd[1277]: pam_unix(sshd:session): session closed for user core Mar 17 18:33:51.403271 systemd[1]: Started sshd@2-10.0.0.17:22-10.0.0.1:37326.service. Mar 17 18:33:51.403693 systemd[1]: sshd@1-10.0.0.17:22-10.0.0.1:37312.service: Deactivated successfully. Mar 17 18:33:51.404189 systemd[1]: session-2.scope: Deactivated successfully. Mar 17 18:33:51.404588 systemd-logind[1191]: Session 2 logged out. Waiting for processes to exit. Mar 17 18:33:51.405219 systemd-logind[1191]: Removed session 2. Mar 17 18:33:51.442265 sshd[1282]: Accepted publickey for core from 10.0.0.1 port 37326 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:33:51.443214 sshd[1282]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.446234 systemd-logind[1191]: New session 3 of user core. Mar 17 18:33:51.447006 systemd[1]: Started session-3.scope. Mar 17 18:33:51.495671 sshd[1282]: pam_unix(sshd:session): session closed for user core Mar 17 18:33:51.499344 systemd[1]: Started sshd@3-10.0.0.17:22-10.0.0.1:37332.service. Mar 17 18:33:51.499856 systemd[1]: sshd@2-10.0.0.17:22-10.0.0.1:37326.service: Deactivated successfully. Mar 17 18:33:51.500466 systemd[1]: session-3.scope: Deactivated successfully. Mar 17 18:33:51.500988 systemd-logind[1191]: Session 3 logged out. Waiting for processes to exit. Mar 17 18:33:51.501808 systemd-logind[1191]: Removed session 3. Mar 17 18:33:51.535094 sshd[1289]: Accepted publickey for core from 10.0.0.1 port 37332 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:33:51.536029 sshd[1289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.539361 systemd-logind[1191]: New session 4 of user core. Mar 17 18:33:51.540455 systemd[1]: Started session-4.scope. Mar 17 18:33:51.593047 sshd[1289]: pam_unix(sshd:session): session closed for user core Mar 17 18:33:51.595581 systemd[1]: sshd@3-10.0.0.17:22-10.0.0.1:37332.service: Deactivated successfully. Mar 17 18:33:51.596174 systemd[1]: session-4.scope: Deactivated successfully. Mar 17 18:33:51.596704 systemd-logind[1191]: Session 4 logged out. Waiting for processes to exit. Mar 17 18:33:51.597763 systemd[1]: Started sshd@4-10.0.0.17:22-10.0.0.1:37340.service. Mar 17 18:33:51.598504 systemd-logind[1191]: Removed session 4. Mar 17 18:33:51.634266 sshd[1296]: Accepted publickey for core from 10.0.0.1 port 37340 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:33:51.635293 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.638357 systemd-logind[1191]: New session 5 of user core. Mar 17 18:33:51.639177 systemd[1]: Started session-5.scope. Mar 17 18:33:51.691443 sudo[1299]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Mar 17 18:33:51.691618 sudo[1299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:33:51.698284 dbus-daemon[1175]: Э\u0014\xab\xe5U: received setenforce notice (enforcing=-1434865520) Mar 17 18:33:51.700349 sudo[1299]: pam_unix(sudo:session): session closed for user root Mar 17 18:33:51.701714 sshd[1296]: pam_unix(sshd:session): session closed for user core Mar 17 18:33:51.704585 systemd[1]: sshd@4-10.0.0.17:22-10.0.0.1:37340.service: Deactivated successfully. Mar 17 18:33:51.705195 systemd[1]: session-5.scope: Deactivated successfully. Mar 17 18:33:51.705733 systemd-logind[1191]: Session 5 logged out. Waiting for processes to exit. Mar 17 18:33:51.706649 systemd[1]: Started sshd@5-10.0.0.17:22-10.0.0.1:37356.service. Mar 17 18:33:51.707394 systemd-logind[1191]: Removed session 5. Mar 17 18:33:51.742092 sshd[1303]: Accepted publickey for core from 10.0.0.1 port 37356 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:33:51.743070 sshd[1303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.745651 systemd-logind[1191]: New session 6 of user core. Mar 17 18:33:51.746322 systemd[1]: Started session-6.scope. Mar 17 18:33:51.795461 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Mar 17 18:33:51.795636 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:33:51.798192 sudo[1307]: pam_unix(sudo:session): session closed for user root Mar 17 18:33:51.801435 sudo[1306]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Mar 17 18:33:51.801608 sudo[1306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:33:51.809805 systemd[1]: Stopping audit-rules.service... Mar 17 18:33:51.809000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:33:51.810765 auditctl[1310]: No rules Mar 17 18:33:51.811043 systemd[1]: audit-rules.service: Deactivated successfully. Mar 17 18:33:51.811174 systemd[1]: Stopped audit-rules.service. Mar 17 18:33:51.813113 kernel: kauditd_printk_skb: 229 callbacks suppressed Mar 17 18:33:51.813172 kernel: audit: type=1305 audit(1742236431.809:186): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:33:51.809000 audit[1310]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe39ee9a70 a2=420 a3=0 items=0 ppid=1 pid=1310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:51.813717 systemd[1]: Starting audit-rules.service... Mar 17 18:33:51.817648 kernel: audit: type=1300 audit(1742236431.809:186): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe39ee9a70 a2=420 a3=0 items=0 ppid=1 pid=1310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:51.817687 kernel: audit: type=1327 audit(1742236431.809:186): proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:33:51.809000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:33:51.818923 kernel: audit: type=1131 audit(1742236431.810:187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.831655 augenrules[1327]: No rules Mar 17 18:33:51.832198 systemd[1]: Finished audit-rules.service. Mar 17 18:33:51.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.832923 sudo[1306]: pam_unix(sudo:session): session closed for user root Mar 17 18:33:51.834000 sshd[1303]: pam_unix(sshd:session): session closed for user core Mar 17 18:33:51.836065 systemd[1]: sshd@5-10.0.0.17:22-10.0.0.1:37356.service: Deactivated successfully. Mar 17 18:33:51.831000 audit[1306]: USER_END pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.836493 systemd[1]: session-6.scope: Deactivated successfully. Mar 17 18:33:51.836891 systemd-logind[1191]: Session 6 logged out. Waiting for processes to exit. Mar 17 18:33:51.837595 systemd[1]: Started sshd@6-10.0.0.17:22-10.0.0.1:37368.service. Mar 17 18:33:51.838399 systemd-logind[1191]: Removed session 6. Mar 17 18:33:51.840394 kernel: audit: type=1130 audit(1742236431.831:188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.840424 kernel: audit: type=1106 audit(1742236431.831:189): pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.831000 audit[1306]: CRED_DISP pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.844246 kernel: audit: type=1104 audit(1742236431.831:190): pid=1306 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.844269 kernel: audit: type=1106 audit(1742236431.833:191): pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.833000 audit[1303]: USER_END pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.833000 audit[1303]: CRED_DISP pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.853048 kernel: audit: type=1104 audit(1742236431.833:192): pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.853071 kernel: audit: type=1131 audit(1742236431.835:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.17:22-10.0.0.1:37356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.17:22-10.0.0.1:37356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.17:22-10.0.0.1:37368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.879000 audit[1333]: USER_ACCT pid=1333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.880677 sshd[1333]: Accepted publickey for core from 10.0.0.1 port 37368 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:33:51.880000 audit[1333]: CRED_ACQ pid=1333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.880000 audit[1333]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefd5ec620 a2=3 a3=0 items=0 ppid=1 pid=1333 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:51.880000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:33:51.881437 sshd[1333]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:33:51.884258 systemd-logind[1191]: New session 7 of user core. Mar 17 18:33:51.884910 systemd[1]: Started session-7.scope. Mar 17 18:33:51.886000 audit[1333]: USER_START pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.887000 audit[1335]: CRED_ACQ pid=1335 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:33:51.933000 audit[1336]: USER_ACCT pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.934469 sudo[1336]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Mar 17 18:33:51.933000 audit[1336]: CRED_REFR pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.934651 sudo[1336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:33:51.934000 audit[1336]: USER_START pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:33:51.953415 systemd[1]: Starting docker.service... Mar 17 18:33:51.984188 env[1348]: time="2025-03-17T18:33:51.984137261Z" level=info msg="Starting up" Mar 17 18:33:51.985381 env[1348]: time="2025-03-17T18:33:51.985346920Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:33:51.985381 env[1348]: time="2025-03-17T18:33:51.985365314Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:33:51.985381 env[1348]: time="2025-03-17T18:33:51.985385752Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:33:51.985576 env[1348]: time="2025-03-17T18:33:51.985397745Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:33:51.986709 env[1348]: time="2025-03-17T18:33:51.986663588Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:33:51.986709 env[1348]: time="2025-03-17T18:33:51.986697332Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:33:51.986709 env[1348]: time="2025-03-17T18:33:51.986707841Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:33:51.986791 env[1348]: time="2025-03-17T18:33:51.986715085Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:33:52.853996 env[1348]: time="2025-03-17T18:33:52.853956893Z" level=info msg="Loading containers: start." Mar 17 18:33:52.902000 audit[1382]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:52.902000 audit[1382]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd532e0bc0 a2=0 a3=7ffd532e0bac items=0 ppid=1348 pid=1382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:52.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Mar 17 18:33:52.904000 audit[1384]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:52.904000 audit[1384]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffee602d980 a2=0 a3=7ffee602d96c items=0 ppid=1348 pid=1384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:52.904000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Mar 17 18:33:52.906000 audit[1386]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:52.906000 audit[1386]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff8be217d0 a2=0 a3=7fff8be217bc items=0 ppid=1348 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:52.906000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:33:52.907000 audit[1388]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:52.907000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffddb09c50 a2=0 a3=7fffddb09c3c items=0 ppid=1348 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:52.907000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:33:52.909000 audit[1390]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:52.909000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe04eb92e0 a2=0 a3=7ffe04eb92cc items=0 ppid=1348 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:52.909000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Mar 17 18:33:52.929000 audit[1395]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:52.929000 audit[1395]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd51c7c930 a2=0 a3=7ffd51c7c91c items=0 ppid=1348 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:52.929000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Mar 17 18:33:53.077000 audit[1397]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.077000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff86951fa0 a2=0 a3=7fff86951f8c items=0 ppid=1348 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.077000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Mar 17 18:33:53.079000 audit[1399]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.079000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd36ec76a0 a2=0 a3=7ffd36ec768c items=0 ppid=1348 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.079000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Mar 17 18:33:53.081000 audit[1401]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.081000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd03166000 a2=0 a3=7ffd03165fec items=0 ppid=1348 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.081000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:33:53.263000 audit[1405]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.263000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcf49ab650 a2=0 a3=7ffcf49ab63c items=0 ppid=1348 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:33:53.268000 audit[1406]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.268000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc9236de10 a2=0 a3=7ffc9236ddfc items=0 ppid=1348 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.268000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:33:53.278103 kernel: Initializing XFRM netlink socket Mar 17 18:33:53.303634 env[1348]: time="2025-03-17T18:33:53.303583743Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Mar 17 18:33:53.317000 audit[1414]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.317000 audit[1414]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc0be5f660 a2=0 a3=7ffc0be5f64c items=0 ppid=1348 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.317000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Mar 17 18:33:53.328000 audit[1417]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.328000 audit[1417]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe2c5d5410 a2=0 a3=7ffe2c5d53fc items=0 ppid=1348 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Mar 17 18:33:53.330000 audit[1420]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.330000 audit[1420]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc1d55e5f0 a2=0 a3=7ffc1d55e5dc items=0 ppid=1348 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.330000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Mar 17 18:33:53.331000 audit[1422]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.331000 audit[1422]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffce78ef120 a2=0 a3=7ffce78ef10c items=0 ppid=1348 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.331000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Mar 17 18:33:53.333000 audit[1424]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.333000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc7b9e7af0 a2=0 a3=7ffc7b9e7adc items=0 ppid=1348 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.333000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Mar 17 18:33:53.335000 audit[1426]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.335000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff041a23c0 a2=0 a3=7fff041a23ac items=0 ppid=1348 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Mar 17 18:33:53.336000 audit[1428]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.336000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd26edf260 a2=0 a3=7ffd26edf24c items=0 ppid=1348 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.336000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Mar 17 18:33:53.343000 audit[1431]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.343000 audit[1431]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff01de17a0 a2=0 a3=7fff01de178c items=0 ppid=1348 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.343000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Mar 17 18:33:53.345000 audit[1433]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.345000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffeb9959960 a2=0 a3=7ffeb995994c items=0 ppid=1348 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.345000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:33:53.346000 audit[1435]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.346000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd7d760540 a2=0 a3=7ffd7d76052c items=0 ppid=1348 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.346000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:33:53.348000 audit[1437]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.348000 audit[1437]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffed29c8a50 a2=0 a3=7ffed29c8a3c items=0 ppid=1348 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.348000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Mar 17 18:33:53.349900 systemd-networkd[1028]: docker0: Link UP Mar 17 18:33:53.441000 audit[1441]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.441000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff0a3bcd70 a2=0 a3=7fff0a3bcd5c items=0 ppid=1348 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.441000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:33:53.445000 audit[1442]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:33:53.445000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc1d06a220 a2=0 a3=7ffc1d06a20c items=0 ppid=1348 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:33:53.445000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:33:53.447309 env[1348]: time="2025-03-17T18:33:53.447271227Z" level=info msg="Loading containers: done." Mar 17 18:33:53.455721 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Mar 17 18:33:53.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:53.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:53.455881 systemd[1]: Stopped kubelet.service. Mar 17 18:33:53.457302 systemd[1]: Starting kubelet.service... Mar 17 18:33:53.556795 systemd[1]: Started kubelet.service. Mar 17 18:33:53.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:53.698161 kubelet[1454]: E0317 18:33:53.698104 1454 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:33:53.700819 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:33:53.700931 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:33:53.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:33:54.294450 env[1348]: time="2025-03-17T18:33:54.294376690Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Mar 17 18:33:54.294675 env[1348]: time="2025-03-17T18:33:54.294563069Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Mar 17 18:33:54.294675 env[1348]: time="2025-03-17T18:33:54.294656284Z" level=info msg="Daemon has completed initialization" Mar 17 18:33:54.783717 systemd[1]: Started docker.service. Mar 17 18:33:54.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:33:54.789977 env[1348]: time="2025-03-17T18:33:54.789911297Z" level=info msg="API listen on /run/docker.sock" Mar 17 18:33:55.332002 env[1206]: time="2025-03-17T18:33:55.331949018Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.3\"" Mar 17 18:33:57.881989 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount175807230.mount: Deactivated successfully. Mar 17 18:34:03.951677 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Mar 17 18:34:03.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:03.951862 systemd[1]: Stopped kubelet.service. Mar 17 18:34:03.952818 kernel: kauditd_printk_skb: 88 callbacks suppressed Mar 17 18:34:03.952855 kernel: audit: type=1130 audit(1742236443.950:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:03.953074 systemd[1]: Starting kubelet.service... Mar 17 18:34:03.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:03.959378 kernel: audit: type=1131 audit(1742236443.950:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:04.030394 systemd[1]: Started kubelet.service. Mar 17 18:34:04.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:04.034125 kernel: audit: type=1130 audit(1742236444.029:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:04.334605 kubelet[1496]: E0317 18:34:04.334459 1496 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:34:04.336459 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:34:04.336572 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:34:04.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:34:04.371105 kernel: audit: type=1131 audit(1742236444.335:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:34:07.836789 env[1206]: time="2025-03-17T18:34:07.836742382Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:07.838926 env[1206]: time="2025-03-17T18:34:07.838888606Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f8bdc4cfa0651e2d7edb4678d2b90129aef82a19249b37dc8d4705e8bd604295,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:07.840632 env[1206]: time="2025-03-17T18:34:07.840609092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:07.842343 env[1206]: time="2025-03-17T18:34:07.842318798Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:279e45cf07e4f56925c3c5237179eb63616788426a96e94df5fedf728b18926e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:07.843036 env[1206]: time="2025-03-17T18:34:07.842996118Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.3\" returns image reference \"sha256:f8bdc4cfa0651e2d7edb4678d2b90129aef82a19249b37dc8d4705e8bd604295\"" Mar 17 18:34:07.843554 env[1206]: time="2025-03-17T18:34:07.843526582Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.3\"" Mar 17 18:34:09.513053 env[1206]: time="2025-03-17T18:34:09.512986860Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:09.515036 env[1206]: time="2025-03-17T18:34:09.514992540Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:085818208a5213f37ef6d103caaf8e1e243816a614eb5b87a98bfffe79c687b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:09.516711 env[1206]: time="2025-03-17T18:34:09.516666740Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:09.518372 env[1206]: time="2025-03-17T18:34:09.518318136Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:54456a96a1bbdc35dcc2e70fcc1355bf655af67694e40b650ac12e83521f6411,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:09.518919 env[1206]: time="2025-03-17T18:34:09.518885189Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.3\" returns image reference \"sha256:085818208a5213f37ef6d103caaf8e1e243816a614eb5b87a98bfffe79c687b5\"" Mar 17 18:34:09.519422 env[1206]: time="2025-03-17T18:34:09.519389064Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.3\"" Mar 17 18:34:11.342937 env[1206]: time="2025-03-17T18:34:11.342864921Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:11.345184 env[1206]: time="2025-03-17T18:34:11.345146589Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b4260bf5078ab1b01dd05fb05015fc436b7100b7b9b5ea738e247a86008b16b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:11.347303 env[1206]: time="2025-03-17T18:34:11.347276983Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:11.349363 env[1206]: time="2025-03-17T18:34:11.349325685Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:aafae2e3a8d65bc6dc3a0c6095c24bc72b1ff608e1417f0f5e860ce4a61c27df,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:11.349907 env[1206]: time="2025-03-17T18:34:11.349878541Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.3\" returns image reference \"sha256:b4260bf5078ab1b01dd05fb05015fc436b7100b7b9b5ea738e247a86008b16b8\"" Mar 17 18:34:11.350392 env[1206]: time="2025-03-17T18:34:11.350367268Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.3\"" Mar 17 18:34:12.590387 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1353786620.mount: Deactivated successfully. Mar 17 18:34:13.558125 env[1206]: time="2025-03-17T18:34:13.558043189Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:13.559917 env[1206]: time="2025-03-17T18:34:13.559877198Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a1ae78fd2f9d8fc345928378dc947c7f1e95f01c1a552781827071867a95d09c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:13.561284 env[1206]: time="2025-03-17T18:34:13.561240414Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:13.562425 env[1206]: time="2025-03-17T18:34:13.562392805Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:5015269547a0b7dd2c062758e9a64467b58978ff2502cad4c3f5cdf4aa554ad3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:13.562780 env[1206]: time="2025-03-17T18:34:13.562730027Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.3\" returns image reference \"sha256:a1ae78fd2f9d8fc345928378dc947c7f1e95f01c1a552781827071867a95d09c\"" Mar 17 18:34:13.563286 env[1206]: time="2025-03-17T18:34:13.563254971Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Mar 17 18:34:14.168250 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3550132442.mount: Deactivated successfully. Mar 17 18:34:14.587373 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Mar 17 18:34:14.587559 systemd[1]: Stopped kubelet.service. Mar 17 18:34:14.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:14.588839 systemd[1]: Starting kubelet.service... Mar 17 18:34:14.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:14.594911 kernel: audit: type=1130 audit(1742236454.586:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:14.594987 kernel: audit: type=1131 audit(1742236454.586:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:14.688799 systemd[1]: Started kubelet.service. Mar 17 18:34:14.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:14.693100 kernel: audit: type=1130 audit(1742236454.688:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:14.728473 kubelet[1507]: E0317 18:34:14.728426 1507 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:34:14.730000 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:34:14.730165 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:34:14.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:34:14.734096 kernel: audit: type=1131 audit(1742236454.729:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:34:16.517920 env[1206]: time="2025-03-17T18:34:16.517862459Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:16.520184 env[1206]: time="2025-03-17T18:34:16.520145618Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:16.523572 env[1206]: time="2025-03-17T18:34:16.523477684Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:16.525439 env[1206]: time="2025-03-17T18:34:16.525408216Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:16.526170 env[1206]: time="2025-03-17T18:34:16.526136385Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Mar 17 18:34:16.526591 env[1206]: time="2025-03-17T18:34:16.526546925Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Mar 17 18:34:17.251253 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2484078083.mount: Deactivated successfully. Mar 17 18:34:17.263984 env[1206]: time="2025-03-17T18:34:17.263930278Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:17.265583 env[1206]: time="2025-03-17T18:34:17.265555327Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:17.303323 env[1206]: time="2025-03-17T18:34:17.303271103Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:17.305246 env[1206]: time="2025-03-17T18:34:17.305201499Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:17.305630 env[1206]: time="2025-03-17T18:34:17.305590616Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Mar 17 18:34:17.306246 env[1206]: time="2025-03-17T18:34:17.306202540Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Mar 17 18:34:17.926321 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount478426318.mount: Deactivated successfully. Mar 17 18:34:21.494498 env[1206]: time="2025-03-17T18:34:21.494440234Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:21.496706 env[1206]: time="2025-03-17T18:34:21.496677345Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:21.498427 env[1206]: time="2025-03-17T18:34:21.498397509Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:21.501152 env[1206]: time="2025-03-17T18:34:21.501117142Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:21.501724 env[1206]: time="2025-03-17T18:34:21.501697851Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Mar 17 18:34:23.937635 systemd[1]: Stopped kubelet.service. Mar 17 18:34:23.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:23.940232 systemd[1]: Starting kubelet.service... Mar 17 18:34:23.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:23.945910 kernel: audit: type=1130 audit(1742236463.936:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:23.946021 kernel: audit: type=1131 audit(1742236463.936:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:23.967853 systemd[1]: Reloading. Mar 17 18:34:24.054145 /usr/lib/systemd/system-generators/torcx-generator[1562]: time="2025-03-17T18:34:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:34:24.054181 /usr/lib/systemd/system-generators/torcx-generator[1562]: time="2025-03-17T18:34:24Z" level=info msg="torcx already run" Mar 17 18:34:24.382425 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:34:24.383153 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:34:24.405173 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.493111 kernel: audit: type=1400 audit(1742236464.484:242): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.493245 kernel: audit: type=1400 audit(1742236464.484:243): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.493275 kernel: audit: type=1400 audit(1742236464.484:244): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.505613 kernel: audit: type=1400 audit(1742236464.484:245): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.505763 kernel: audit: type=1400 audit(1742236464.484:246): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.505790 kernel: audit: type=1400 audit(1742236464.484:247): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.509698 kernel: audit: type=1400 audit(1742236464.484:248): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.513229 kernel: audit: type=1400 audit(1742236464.484:249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit: BPF prog-id=40 op=LOAD Mar 17 18:34:24.492000 audit: BPF prog-id=24 op=UNLOAD Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit: BPF prog-id=41 op=LOAD Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.500000 audit: BPF prog-id=42 op=LOAD Mar 17 18:34:24.500000 audit: BPF prog-id=25 op=UNLOAD Mar 17 18:34:24.500000 audit: BPF prog-id=26 op=UNLOAD Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.504000 audit: BPF prog-id=43 op=LOAD Mar 17 18:34:24.504000 audit: BPF prog-id=34 op=UNLOAD Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit: BPF prog-id=44 op=LOAD Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.515000 audit: BPF prog-id=45 op=LOAD Mar 17 18:34:24.516000 audit: BPF prog-id=27 op=UNLOAD Mar 17 18:34:24.516000 audit: BPF prog-id=28 op=UNLOAD Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.516000 audit: BPF prog-id=46 op=LOAD Mar 17 18:34:24.516000 audit: BPF prog-id=38 op=UNLOAD Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit: BPF prog-id=47 op=LOAD Mar 17 18:34:24.518000 audit: BPF prog-id=29 op=UNLOAD Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit: BPF prog-id=48 op=LOAD Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit: BPF prog-id=49 op=LOAD Mar 17 18:34:24.519000 audit: BPF prog-id=30 op=UNLOAD Mar 17 18:34:24.519000 audit: BPF prog-id=31 op=UNLOAD Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.519000 audit: BPF prog-id=50 op=LOAD Mar 17 18:34:24.519000 audit: BPF prog-id=33 op=UNLOAD Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit: BPF prog-id=51 op=LOAD Mar 17 18:34:24.521000 audit: BPF prog-id=35 op=UNLOAD Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit: BPF prog-id=52 op=LOAD Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.522000 audit: BPF prog-id=53 op=LOAD Mar 17 18:34:24.522000 audit: BPF prog-id=36 op=UNLOAD Mar 17 18:34:24.522000 audit: BPF prog-id=37 op=UNLOAD Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:24.523000 audit: BPF prog-id=54 op=LOAD Mar 17 18:34:24.523000 audit: BPF prog-id=32 op=UNLOAD Mar 17 18:34:24.540917 systemd[1]: Started kubelet.service. Mar 17 18:34:24.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:24.543229 systemd[1]: Stopping kubelet.service... Mar 17 18:34:24.549227 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:34:24.549451 systemd[1]: Stopped kubelet.service. Mar 17 18:34:24.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:24.551498 systemd[1]: Starting kubelet.service... Mar 17 18:34:24.656376 systemd[1]: Started kubelet.service. Mar 17 18:34:24.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:24.726335 kubelet[1610]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:34:24.726335 kubelet[1610]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Mar 17 18:34:24.726335 kubelet[1610]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:34:24.726814 kubelet[1610]: I0317 18:34:24.726397 1610 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:34:25.060723 kubelet[1610]: I0317 18:34:25.060631 1610 server.go:520] "Kubelet version" kubeletVersion="v1.32.0" Mar 17 18:34:25.060723 kubelet[1610]: I0317 18:34:25.060687 1610 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:34:25.061701 kubelet[1610]: I0317 18:34:25.061051 1610 server.go:954] "Client rotation is on, will bootstrap in background" Mar 17 18:34:25.175927 kubelet[1610]: E0317 18:34:25.175857 1610 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.17:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:25.177570 kubelet[1610]: I0317 18:34:25.177509 1610 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:34:25.198734 kubelet[1610]: E0317 18:34:25.198668 1610 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:34:25.198734 kubelet[1610]: I0317 18:34:25.198721 1610 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:34:25.203928 kubelet[1610]: I0317 18:34:25.203835 1610 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:34:25.209304 kubelet[1610]: I0317 18:34:25.209192 1610 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:34:25.209546 kubelet[1610]: I0317 18:34:25.209293 1610 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:34:25.209758 kubelet[1610]: I0317 18:34:25.209547 1610 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:34:25.209758 kubelet[1610]: I0317 18:34:25.209561 1610 container_manager_linux.go:304] "Creating device plugin manager" Mar 17 18:34:25.209758 kubelet[1610]: I0317 18:34:25.209752 1610 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:34:25.213471 kubelet[1610]: I0317 18:34:25.213415 1610 kubelet.go:446] "Attempting to sync node with API server" Mar 17 18:34:25.213471 kubelet[1610]: I0317 18:34:25.213460 1610 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:34:25.213633 kubelet[1610]: I0317 18:34:25.213491 1610 kubelet.go:352] "Adding apiserver pod source" Mar 17 18:34:25.213633 kubelet[1610]: I0317 18:34:25.213508 1610 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:34:25.222729 kubelet[1610]: W0317 18:34:25.222650 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:25.222729 kubelet[1610]: E0317 18:34:25.222737 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:25.223465 kubelet[1610]: W0317 18:34:25.223398 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:25.223535 kubelet[1610]: E0317 18:34:25.223473 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:25.237567 kubelet[1610]: I0317 18:34:25.237457 1610 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:34:25.238194 kubelet[1610]: I0317 18:34:25.238162 1610 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:34:25.239435 kubelet[1610]: W0317 18:34:25.239396 1610 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Mar 17 18:34:25.248096 kubelet[1610]: I0317 18:34:25.248005 1610 watchdog_linux.go:99] "Systemd watchdog is not enabled" Mar 17 18:34:25.248096 kubelet[1610]: I0317 18:34:25.248110 1610 server.go:1287] "Started kubelet" Mar 17 18:34:25.252914 kubelet[1610]: I0317 18:34:25.249175 1610 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:34:25.252914 kubelet[1610]: I0317 18:34:25.249881 1610 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:34:25.252914 kubelet[1610]: I0317 18:34:25.250275 1610 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:34:25.252914 kubelet[1610]: I0317 18:34:25.251467 1610 server.go:490] "Adding debug handlers to kubelet server" Mar 17 18:34:25.257925 kubelet[1610]: E0317 18:34:25.257003 1610 kubelet.go:1561] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:34:25.260000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:25.260000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:34:25.264421 kubelet[1610]: E0317 18:34:25.258179 1610 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.17:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.17:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.182daad599d79a5c default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-03-17 18:34:25.248049756 +0000 UTC m=+0.577334232,LastTimestamp:2025-03-17 18:34:25.248049756 +0000 UTC m=+0.577334232,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Mar 17 18:34:25.265437 kubelet[1610]: I0317 18:34:25.265353 1610 kubelet.go:1513] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:34:25.265503 kubelet[1610]: I0317 18:34:25.265453 1610 kubelet.go:1517] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Mar 17 18:34:25.265631 kubelet[1610]: I0317 18:34:25.265599 1610 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:34:25.260000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b653b0 a1=c00088cbd0 a2=c000b65380 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.260000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:34:25.263000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:25.263000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:34:25.263000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b7c5c0 a1=c00088cbe8 a2=c000b65440 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.263000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:34:25.266738 kubelet[1610]: I0317 18:34:25.265926 1610 volume_manager.go:297] "Starting Kubelet Volume Manager" Mar 17 18:34:25.266738 kubelet[1610]: I0317 18:34:25.266103 1610 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:34:25.269096 kubelet[1610]: E0317 18:34:25.268679 1610 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:34:25.269321 kubelet[1610]: I0317 18:34:25.269204 1610 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:34:25.269403 kubelet[1610]: I0317 18:34:25.269274 1610 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:34:25.270038 kubelet[1610]: E0317 18:34:25.270009 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.17:6443: connect: connection refused" interval="200ms" Mar 17 18:34:25.270161 kubelet[1610]: W0317 18:34:25.270033 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:25.270280 kubelet[1610]: E0317 18:34:25.270254 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:25.275506 kubelet[1610]: I0317 18:34:25.275452 1610 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:34:25.275660 kubelet[1610]: I0317 18:34:25.275623 1610 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:34:25.277123 kubelet[1610]: I0317 18:34:25.277096 1610 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:34:25.278000 audit[1624]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.278000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd9b03d0a0 a2=0 a3=7ffd9b03d08c items=0 ppid=1610 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.278000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:34:25.279000 audit[1625]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.279000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe4e2ef390 a2=0 a3=7ffe4e2ef37c items=0 ppid=1610 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.279000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:34:25.286000 audit[1627]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.286000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc85a70440 a2=0 a3=7ffc85a7042c items=0 ppid=1610 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.286000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:34:25.297000 audit[1634]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.297000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe9c33b540 a2=0 a3=7ffe9c33b52c items=0 ppid=1610 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.297000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:34:25.304259 kubelet[1610]: I0317 18:34:25.304182 1610 cpu_manager.go:221] "Starting CPU manager" policy="none" Mar 17 18:34:25.304259 kubelet[1610]: I0317 18:34:25.304216 1610 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Mar 17 18:34:25.304259 kubelet[1610]: I0317 18:34:25.304246 1610 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:34:25.309000 audit[1637]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.309000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffdae9971a0 a2=0 a3=7ffdae99718c items=0 ppid=1610 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Mar 17 18:34:25.311657 kubelet[1610]: I0317 18:34:25.311174 1610 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:34:25.311000 audit[1639]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:25.311000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd1e056900 a2=0 a3=7ffd1e0568ec items=0 ppid=1610 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.311000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:34:25.314660 kubelet[1610]: I0317 18:34:25.312980 1610 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:34:25.314660 kubelet[1610]: I0317 18:34:25.313023 1610 status_manager.go:227] "Starting to sync pod status with apiserver" Mar 17 18:34:25.314660 kubelet[1610]: I0317 18:34:25.313051 1610 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Mar 17 18:34:25.314660 kubelet[1610]: I0317 18:34:25.313062 1610 kubelet.go:2388] "Starting kubelet main sync loop" Mar 17 18:34:25.314660 kubelet[1610]: E0317 18:34:25.313137 1610 kubelet.go:2412] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:34:25.314660 kubelet[1610]: W0317 18:34:25.313764 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:25.314660 kubelet[1610]: E0317 18:34:25.313868 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:25.313000 audit[1640]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.313000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf0a8f7e0 a2=0 a3=7ffdf0a8f7cc items=0 ppid=1610 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.313000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:34:25.313000 audit[1641]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:25.313000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc493ef1c0 a2=0 a3=7ffc493ef1ac items=0 ppid=1610 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.313000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:34:25.315000 audit[1642]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.315000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca4301660 a2=0 a3=7ffca430164c items=0 ppid=1610 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:34:25.316000 audit[1643]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:25.316000 audit[1643]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffe19950200 a2=0 a3=7ffe199501ec items=0 ppid=1610 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.316000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:34:25.317000 audit[1644]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:25.317000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1a93a480 a2=0 a3=7ffd1a93a46c items=0 ppid=1610 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.317000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:34:25.317000 audit[1645]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:25.317000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc4c053760 a2=0 a3=7ffc4c05374c items=0 ppid=1610 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.317000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:34:25.370453 kubelet[1610]: E0317 18:34:25.370313 1610 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:34:25.413779 kubelet[1610]: E0317 18:34:25.413656 1610 kubelet.go:2412] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Mar 17 18:34:25.470504 kubelet[1610]: E0317 18:34:25.470418 1610 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:34:25.470914 kubelet[1610]: E0317 18:34:25.470836 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.17:6443: connect: connection refused" interval="400ms" Mar 17 18:34:25.571546 kubelet[1610]: E0317 18:34:25.571350 1610 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:34:25.580155 kubelet[1610]: I0317 18:34:25.580071 1610 policy_none.go:49] "None policy: Start" Mar 17 18:34:25.580155 kubelet[1610]: I0317 18:34:25.580141 1610 memory_manager.go:186] "Starting memorymanager" policy="None" Mar 17 18:34:25.580155 kubelet[1610]: I0317 18:34:25.580157 1610 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:34:25.587701 systemd[1]: Created slice kubepods.slice. Mar 17 18:34:25.592039 systemd[1]: Created slice kubepods-burstable.slice. Mar 17 18:34:25.594685 systemd[1]: Created slice kubepods-besteffort.slice. Mar 17 18:34:25.605189 kubelet[1610]: I0317 18:34:25.605141 1610 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:34:25.604000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:25.604000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:34:25.604000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000efb9e0 a1=c000cc7a88 a2=c000efb9b0 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:25.604000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:34:25.605519 kubelet[1610]: I0317 18:34:25.605226 1610 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:34:25.605519 kubelet[1610]: I0317 18:34:25.605374 1610 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:34:25.605519 kubelet[1610]: I0317 18:34:25.605390 1610 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:34:25.605728 kubelet[1610]: I0317 18:34:25.605686 1610 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:34:25.606872 kubelet[1610]: E0317 18:34:25.606836 1610 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Mar 17 18:34:25.606936 kubelet[1610]: E0317 18:34:25.606901 1610 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Mar 17 18:34:25.622014 systemd[1]: Created slice kubepods-burstable-podad41858f9cc3247b78cc75e62821b273.slice. Mar 17 18:34:25.638031 kubelet[1610]: E0317 18:34:25.637984 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:25.641191 systemd[1]: Created slice kubepods-burstable-podcbbb394ff48414687df77e1bc213eeb5.slice. Mar 17 18:34:25.647249 kubelet[1610]: E0317 18:34:25.647196 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:25.649888 systemd[1]: Created slice kubepods-burstable-pod3700e556aa2777679a324159272023f1.slice. Mar 17 18:34:25.651696 kubelet[1610]: E0317 18:34:25.651656 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:25.672236 kubelet[1610]: I0317 18:34:25.672162 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:25.672236 kubelet[1610]: I0317 18:34:25.672217 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ad41858f9cc3247b78cc75e62821b273-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"ad41858f9cc3247b78cc75e62821b273\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:25.672236 kubelet[1610]: I0317 18:34:25.672251 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ad41858f9cc3247b78cc75e62821b273-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"ad41858f9cc3247b78cc75e62821b273\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:25.672481 kubelet[1610]: I0317 18:34:25.672274 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:25.672481 kubelet[1610]: I0317 18:34:25.672300 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:25.672481 kubelet[1610]: I0317 18:34:25.672332 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3700e556aa2777679a324159272023f1-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"3700e556aa2777679a324159272023f1\") " pod="kube-system/kube-scheduler-localhost" Mar 17 18:34:25.672481 kubelet[1610]: I0317 18:34:25.672411 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ad41858f9cc3247b78cc75e62821b273-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"ad41858f9cc3247b78cc75e62821b273\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:25.672481 kubelet[1610]: I0317 18:34:25.672454 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:25.672670 kubelet[1610]: I0317 18:34:25.672472 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:25.707433 kubelet[1610]: I0317 18:34:25.707393 1610 kubelet_node_status.go:76] "Attempting to register node" node="localhost" Mar 17 18:34:25.707926 kubelet[1610]: E0317 18:34:25.707856 1610 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://10.0.0.17:6443/api/v1/nodes\": dial tcp 10.0.0.17:6443: connect: connection refused" node="localhost" Mar 17 18:34:25.871939 kubelet[1610]: E0317 18:34:25.871790 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.17:6443: connect: connection refused" interval="800ms" Mar 17 18:34:25.909576 kubelet[1610]: I0317 18:34:25.909530 1610 kubelet_node_status.go:76] "Attempting to register node" node="localhost" Mar 17 18:34:25.910054 kubelet[1610]: E0317 18:34:25.910014 1610 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://10.0.0.17:6443/api/v1/nodes\": dial tcp 10.0.0.17:6443: connect: connection refused" node="localhost" Mar 17 18:34:25.939267 kubelet[1610]: E0317 18:34:25.939224 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:25.939943 env[1206]: time="2025-03-17T18:34:25.939872869Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:ad41858f9cc3247b78cc75e62821b273,Namespace:kube-system,Attempt:0,}" Mar 17 18:34:25.948356 kubelet[1610]: E0317 18:34:25.948302 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:25.948966 env[1206]: time="2025-03-17T18:34:25.948918791Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:cbbb394ff48414687df77e1bc213eeb5,Namespace:kube-system,Attempt:0,}" Mar 17 18:34:25.952185 kubelet[1610]: E0317 18:34:25.952146 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:25.952646 env[1206]: time="2025-03-17T18:34:25.952595833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:3700e556aa2777679a324159272023f1,Namespace:kube-system,Attempt:0,}" Mar 17 18:34:26.312067 kubelet[1610]: I0317 18:34:26.312027 1610 kubelet_node_status.go:76] "Attempting to register node" node="localhost" Mar 17 18:34:26.312438 kubelet[1610]: E0317 18:34:26.312391 1610 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://10.0.0.17:6443/api/v1/nodes\": dial tcp 10.0.0.17:6443: connect: connection refused" node="localhost" Mar 17 18:34:26.335606 kubelet[1610]: W0317 18:34:26.335571 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:26.335661 kubelet[1610]: E0317 18:34:26.335606 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:26.489566 kubelet[1610]: W0317 18:34:26.489492 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:26.489689 kubelet[1610]: E0317 18:34:26.489579 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:26.560390 kubelet[1610]: W0317 18:34:26.560330 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:26.560506 kubelet[1610]: E0317 18:34:26.560399 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:26.566757 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4134908426.mount: Deactivated successfully. Mar 17 18:34:26.573567 env[1206]: time="2025-03-17T18:34:26.573536652Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.576482 env[1206]: time="2025-03-17T18:34:26.576435299Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.577372 env[1206]: time="2025-03-17T18:34:26.577332743Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.579153 env[1206]: time="2025-03-17T18:34:26.579131311Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.580810 env[1206]: time="2025-03-17T18:34:26.580783039Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.582187 env[1206]: time="2025-03-17T18:34:26.582166668Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.583244 env[1206]: time="2025-03-17T18:34:26.583209629Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.584346 env[1206]: time="2025-03-17T18:34:26.584316032Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.586227 env[1206]: time="2025-03-17T18:34:26.586193197Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.587459 env[1206]: time="2025-03-17T18:34:26.587440157Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.588760 env[1206]: time="2025-03-17T18:34:26.588740548Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.589985 env[1206]: time="2025-03-17T18:34:26.589948242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:26.591501 kubelet[1610]: W0317 18:34:26.591457 1610 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.17:6443: connect: connection refused Mar 17 18:34:26.591553 kubelet[1610]: E0317 18:34:26.591518 1610 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.17:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.17:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:34:26.623775 env[1206]: time="2025-03-17T18:34:26.623703494Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:34:26.623892 env[1206]: time="2025-03-17T18:34:26.623785600Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:34:26.623892 env[1206]: time="2025-03-17T18:34:26.623815356Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:34:26.624096 env[1206]: time="2025-03-17T18:34:26.624044121Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/284d9cbd2ba13fc61359474be999edcf3150253235a5e48e3236007799852ad2 pid=1670 runtime=io.containerd.runc.v2 Mar 17 18:34:26.624985 env[1206]: time="2025-03-17T18:34:26.624933000Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:34:26.624985 env[1206]: time="2025-03-17T18:34:26.624972785Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:34:26.625048 env[1206]: time="2025-03-17T18:34:26.624986282Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:34:26.625244 env[1206]: time="2025-03-17T18:34:26.625186773Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/661d8a431c7ff6535cd1e991d74cb0a98e5cb82906813b1fb89a4289c1aa7106 pid=1653 runtime=io.containerd.runc.v2 Mar 17 18:34:26.631603 env[1206]: time="2025-03-17T18:34:26.631524223Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:34:26.631603 env[1206]: time="2025-03-17T18:34:26.631560051Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:34:26.631603 env[1206]: time="2025-03-17T18:34:26.631585048Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:34:26.631818 env[1206]: time="2025-03-17T18:34:26.631770821Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/be3d4177cb726c0f0fe8d321ab7ba06253192a845f652ca7cabacc4794a212ee pid=1672 runtime=io.containerd.runc.v2 Mar 17 18:34:26.647457 systemd[1]: Started cri-containerd-284d9cbd2ba13fc61359474be999edcf3150253235a5e48e3236007799852ad2.scope. Mar 17 18:34:26.649733 systemd[1]: Started cri-containerd-661d8a431c7ff6535cd1e991d74cb0a98e5cb82906813b1fb89a4289c1aa7106.scope. Mar 17 18:34:26.700606 kubelet[1610]: E0317 18:34:26.699911 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.17:6443: connect: connection refused" interval="1.6s" Mar 17 18:34:26.722156 systemd[1]: Started cri-containerd-be3d4177cb726c0f0fe8d321ab7ba06253192a845f652ca7cabacc4794a212ee.scope. Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.756000 audit: BPF prog-id=55 op=LOAD Mar 17 18:34:26.811000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.811000 audit[1696]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1653 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316438613433316337666636353335636431653939316437346362 Mar 17 18:34:26.811000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.811000 audit[1696]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1653 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316438613433316337666636353335636431653939316437346362 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.812000 audit: BPF prog-id=56 op=LOAD Mar 17 18:34:26.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.814000 audit: BPF prog-id=57 op=LOAD Mar 17 18:34:26.812000 audit[1696]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002f64e0 items=0 ppid=1653 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316438613433316337666636353335636431653939316437346362 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1670 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238346439636264326261313366633631333539343734626539393965 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1670 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238346439636264326261313366633631333539343734626539393965 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit: BPF prog-id=58 op=LOAD Mar 17 18:34:26.815000 audit[1692]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002890b0 items=0 ppid=1670 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238346439636264326261313366633631333539343734626539393965 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit: BPF prog-id=59 op=LOAD Mar 17 18:34:26.815000 audit[1692]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002890f8 items=0 ppid=1670 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238346439636264326261313366633631333539343734626539393965 Mar 17 18:34:26.815000 audit: BPF prog-id=59 op=UNLOAD Mar 17 18:34:26.815000 audit: BPF prog-id=58 op=UNLOAD Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit: BPF prog-id=60 op=LOAD Mar 17 18:34:26.815000 audit[1692]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000289508 items=0 ppid=1670 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238346439636264326261313366633631333539343734626539393965 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.815000 audit: BPF prog-id=61 op=LOAD Mar 17 18:34:26.815000 audit[1696]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002f6528 items=0 ppid=1653 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316438613433316337666636353335636431653939316437346362 Mar 17 18:34:26.817000 audit: BPF prog-id=61 op=UNLOAD Mar 17 18:34:26.817000 audit: BPF prog-id=56 op=UNLOAD Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { perfmon } for pid=1696 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit[1696]: AVC avc: denied { bpf } for pid=1696 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.817000 audit: BPF prog-id=62 op=LOAD Mar 17 18:34:26.817000 audit[1696]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002f6938 items=0 ppid=1653 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636316438613433316337666636353335636431653939316437346362 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.830000 audit: BPF prog-id=63 op=LOAD Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336434313737636237323663306630666538643332316162376261 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336434313737636237323663306630666538643332316162376261 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit: BPF prog-id=64 op=LOAD Mar 17 18:34:26.831000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028d1d0 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336434313737636237323663306630666538643332316162376261 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit: BPF prog-id=65 op=LOAD Mar 17 18:34:26.831000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028d218 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336434313737636237323663306630666538643332316162376261 Mar 17 18:34:26.831000 audit: BPF prog-id=65 op=UNLOAD Mar 17 18:34:26.831000 audit: BPF prog-id=64 op=UNLOAD Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.831000 audit: BPF prog-id=66 op=LOAD Mar 17 18:34:26.831000 audit[1704]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00028d628 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336434313737636237323663306630666538643332316162376261 Mar 17 18:34:26.850169 env[1206]: time="2025-03-17T18:34:26.850121659Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:3700e556aa2777679a324159272023f1,Namespace:kube-system,Attempt:0,} returns sandbox id \"284d9cbd2ba13fc61359474be999edcf3150253235a5e48e3236007799852ad2\"" Mar 17 18:34:26.851088 kubelet[1610]: E0317 18:34:26.851049 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:26.852805 env[1206]: time="2025-03-17T18:34:26.852779448Z" level=info msg="CreateContainer within sandbox \"284d9cbd2ba13fc61359474be999edcf3150253235a5e48e3236007799852ad2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Mar 17 18:34:26.865549 env[1206]: time="2025-03-17T18:34:26.864929563Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:cbbb394ff48414687df77e1bc213eeb5,Namespace:kube-system,Attempt:0,} returns sandbox id \"661d8a431c7ff6535cd1e991d74cb0a98e5cb82906813b1fb89a4289c1aa7106\"" Mar 17 18:34:26.865903 kubelet[1610]: E0317 18:34:26.865857 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:26.867687 env[1206]: time="2025-03-17T18:34:26.867667374Z" level=info msg="CreateContainer within sandbox \"661d8a431c7ff6535cd1e991d74cb0a98e5cb82906813b1fb89a4289c1aa7106\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Mar 17 18:34:26.869490 env[1206]: time="2025-03-17T18:34:26.869470420Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:ad41858f9cc3247b78cc75e62821b273,Namespace:kube-system,Attempt:0,} returns sandbox id \"be3d4177cb726c0f0fe8d321ab7ba06253192a845f652ca7cabacc4794a212ee\"" Mar 17 18:34:26.871066 kubelet[1610]: E0317 18:34:26.871027 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:26.872874 env[1206]: time="2025-03-17T18:34:26.872818171Z" level=info msg="CreateContainer within sandbox \"be3d4177cb726c0f0fe8d321ab7ba06253192a845f652ca7cabacc4794a212ee\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Mar 17 18:34:26.874246 env[1206]: time="2025-03-17T18:34:26.874223631Z" level=info msg="CreateContainer within sandbox \"284d9cbd2ba13fc61359474be999edcf3150253235a5e48e3236007799852ad2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"85fd310174edbcc7ead81d53d332021793d3be23400437d37b1acf7391eb371e\"" Mar 17 18:34:26.874759 env[1206]: time="2025-03-17T18:34:26.874735643Z" level=info msg="StartContainer for \"85fd310174edbcc7ead81d53d332021793d3be23400437d37b1acf7391eb371e\"" Mar 17 18:34:26.889201 systemd[1]: Started cri-containerd-85fd310174edbcc7ead81d53d332021793d3be23400437d37b1acf7391eb371e.scope. Mar 17 18:34:26.889889 env[1206]: time="2025-03-17T18:34:26.889726826Z" level=info msg="CreateContainer within sandbox \"661d8a431c7ff6535cd1e991d74cb0a98e5cb82906813b1fb89a4289c1aa7106\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"f095907e8b63674126e9b9d513b85401194989556f12e4c0000cf9c55deae15f\"" Mar 17 18:34:26.891330 env[1206]: time="2025-03-17T18:34:26.891295816Z" level=info msg="StartContainer for \"f095907e8b63674126e9b9d513b85401194989556f12e4c0000cf9c55deae15f\"" Mar 17 18:34:26.895046 env[1206]: time="2025-03-17T18:34:26.895001557Z" level=info msg="CreateContainer within sandbox \"be3d4177cb726c0f0fe8d321ab7ba06253192a845f652ca7cabacc4794a212ee\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"4096a7edceffbed885a1215c1432872fb6b5e8be71f74dfc8de78b39a8c3866b\"" Mar 17 18:34:26.895500 env[1206]: time="2025-03-17T18:34:26.895464977Z" level=info msg="StartContainer for \"4096a7edceffbed885a1215c1432872fb6b5e8be71f74dfc8de78b39a8c3866b\"" Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.904000 audit: BPF prog-id=67 op=LOAD Mar 17 18:34:26.907485 systemd[1]: Started cri-containerd-f095907e8b63674126e9b9d513b85401194989556f12e4c0000cf9c55deae15f.scope. Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1670 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835666433313031373465646263633765616438316435336433333230 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1670 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835666433313031373465646263633765616438316435336433333230 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.907000 audit: BPF prog-id=68 op=LOAD Mar 17 18:34:26.907000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00038c990 items=0 ppid=1670 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835666433313031373465646263633765616438316435336433333230 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.910000 audit: BPF prog-id=69 op=LOAD Mar 17 18:34:26.910000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00038c9d8 items=0 ppid=1670 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835666433313031373465646263633765616438316435336433333230 Mar 17 18:34:26.911000 audit: BPF prog-id=69 op=UNLOAD Mar 17 18:34:26.911000 audit: BPF prog-id=68 op=UNLOAD Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.911000 audit: BPF prog-id=70 op=LOAD Mar 17 18:34:26.911000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038cde8 items=0 ppid=1670 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.911000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835666433313031373465646263633765616438316435336433333230 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.920000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.920000 audit: BPF prog-id=71 op=LOAD Mar 17 18:34:26.923487 systemd[1]: Started cri-containerd-4096a7edceffbed885a1215c1432872fb6b5e8be71f74dfc8de78b39a8c3866b.scope. Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630393539303765386236333637343132366539623964353133623835 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630393539303765386236333637343132366539623964353133623835 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.923000 audit: BPF prog-id=72 op=LOAD Mar 17 18:34:26.923000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000218dd0 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630393539303765386236333637343132366539623964353133623835 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit: BPF prog-id=73 op=LOAD Mar 17 18:34:26.926000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000218e18 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630393539303765386236333637343132366539623964353133623835 Mar 17 18:34:26.926000 audit: BPF prog-id=73 op=UNLOAD Mar 17 18:34:26.926000 audit: BPF prog-id=72 op=UNLOAD Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.926000 audit: BPF prog-id=74 op=LOAD Mar 17 18:34:26.926000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000219228 items=0 ppid=1653 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630393539303765386236333637343132366539623964353133623835 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.946000 audit: BPF prog-id=75 op=LOAD Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=1672 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393661376564636566666265643838356131323135633134333238 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=1672 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393661376564636566666265643838356131323135633134333238 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit: BPF prog-id=76 op=LOAD Mar 17 18:34:26.947000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0001783d0 items=0 ppid=1672 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393661376564636566666265643838356131323135633134333238 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit: BPF prog-id=77 op=LOAD Mar 17 18:34:26.947000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000178418 items=0 ppid=1672 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393661376564636566666265643838356131323135633134333238 Mar 17 18:34:26.947000 audit: BPF prog-id=77 op=UNLOAD Mar 17 18:34:26.947000 audit: BPF prog-id=76 op=UNLOAD Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:26.947000 audit: BPF prog-id=78 op=LOAD Mar 17 18:34:26.947000 audit[1817]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000178828 items=0 ppid=1672 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:26.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393661376564636566666265643838356131323135633134333238 Mar 17 18:34:26.962542 env[1206]: time="2025-03-17T18:34:26.962487955Z" level=info msg="StartContainer for \"85fd310174edbcc7ead81d53d332021793d3be23400437d37b1acf7391eb371e\" returns successfully" Mar 17 18:34:26.962878 env[1206]: time="2025-03-17T18:34:26.962616109Z" level=info msg="StartContainer for \"f095907e8b63674126e9b9d513b85401194989556f12e4c0000cf9c55deae15f\" returns successfully" Mar 17 18:34:27.030997 env[1206]: time="2025-03-17T18:34:27.030951503Z" level=info msg="StartContainer for \"4096a7edceffbed885a1215c1432872fb6b5e8be71f74dfc8de78b39a8c3866b\" returns successfully" Mar 17 18:34:27.114829 kubelet[1610]: I0317 18:34:27.114434 1610 kubelet_node_status.go:76] "Attempting to register node" node="localhost" Mar 17 18:34:27.319597 kubelet[1610]: E0317 18:34:27.319429 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:27.319597 kubelet[1610]: E0317 18:34:27.319530 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:27.321361 kubelet[1610]: E0317 18:34:27.321346 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:27.321580 kubelet[1610]: E0317 18:34:27.321569 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:27.322814 kubelet[1610]: E0317 18:34:27.322801 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:27.322985 kubelet[1610]: E0317 18:34:27.322972 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:27.584894 update_engine[1196]: I0317 18:34:27.584172 1196 update_attempter.cc:509] Updating boot flags... Mar 17 18:34:28.410638 kubelet[1610]: E0317 18:34:28.409828 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:28.410638 kubelet[1610]: E0317 18:34:28.409950 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:28.410638 kubelet[1610]: E0317 18:34:28.410154 1610 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Mar 17 18:34:28.410638 kubelet[1610]: E0317 18:34:28.410237 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:28.560000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:28.560000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000378870 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:28.560000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:28.561000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:28.561000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0000fca20 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:28.561000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:29.065000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.067490 kernel: kauditd_printk_skb: 563 callbacks suppressed Mar 17 18:34:29.067558 kernel: audit: type=1400 audit(1742236469.065:542): avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.065000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c0033cc000 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.076550 kernel: audit: type=1300 audit(1742236469.065:542): arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c0033cc000 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.076700 kernel: audit: type=1327 audit(1742236469.065:542): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.087000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.097346 kernel: audit: type=1400 audit(1742236469.087:543): avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.097399 kernel: audit: type=1300 audit(1742236469.087:543): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c002181cc0 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.087000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c002181cc0 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.101518 kernel: audit: type=1327 audit(1742236469.087:543): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.105341 kernel: audit: type=1400 audit(1742236469.087:544): avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.087000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.087000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0034bf890 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.110115 kernel: audit: type=1300 audit(1742236469.087:544): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0034bf890 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.114183 kernel: audit: type=1327 audit(1742236469.087:544): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.114272 kernel: audit: type=1400 audit(1742236469.087:545): avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7300 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.087000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7300 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.087000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c006098090 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.118000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.118000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00752a140 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.118000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.122000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:29.122000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c003e0faa0 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:34:29.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:34:29.157710 kubelet[1610]: E0317 18:34:29.157666 1610 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Mar 17 18:34:29.224355 kubelet[1610]: I0317 18:34:29.224295 1610 apiserver.go:52] "Watching apiserver" Mar 17 18:34:29.258778 kubelet[1610]: I0317 18:34:29.258726 1610 kubelet_node_status.go:79] "Successfully registered node" node="localhost" Mar 17 18:34:29.258778 kubelet[1610]: E0317 18:34:29.258766 1610 kubelet_node_status.go:549] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Mar 17 18:34:29.270167 kubelet[1610]: I0317 18:34:29.270131 1610 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:29.270325 kubelet[1610]: I0317 18:34:29.270169 1610 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:34:29.325185 kubelet[1610]: E0317 18:34:29.325038 1610 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:29.325185 kubelet[1610]: I0317 18:34:29.325074 1610 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:29.327161 kubelet[1610]: E0317 18:34:29.327126 1610 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:29.327161 kubelet[1610]: I0317 18:34:29.327159 1610 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Mar 17 18:34:29.329025 kubelet[1610]: E0317 18:34:29.328986 1610 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Mar 17 18:34:31.605512 systemd[1]: Reloading. Mar 17 18:34:31.668367 /usr/lib/systemd/system-generators/torcx-generator[1924]: time="2025-03-17T18:34:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:34:31.668407 /usr/lib/systemd/system-generators/torcx-generator[1924]: time="2025-03-17T18:34:31Z" level=info msg="torcx already run" Mar 17 18:34:32.039852 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:34:32.039880 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:34:32.066071 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.157000 audit: BPF prog-id=79 op=LOAD Mar 17 18:34:32.157000 audit: BPF prog-id=71 op=UNLOAD Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit: BPF prog-id=80 op=LOAD Mar 17 18:34:32.158000 audit: BPF prog-id=55 op=UNLOAD Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit: BPF prog-id=81 op=LOAD Mar 17 18:34:32.158000 audit: BPF prog-id=40 op=UNLOAD Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit: BPF prog-id=82 op=LOAD Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.159000 audit: BPF prog-id=83 op=LOAD Mar 17 18:34:32.159000 audit: BPF prog-id=41 op=UNLOAD Mar 17 18:34:32.159000 audit: BPF prog-id=42 op=UNLOAD Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit: BPF prog-id=84 op=LOAD Mar 17 18:34:32.160000 audit: BPF prog-id=67 op=UNLOAD Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit: BPF prog-id=85 op=LOAD Mar 17 18:34:32.161000 audit: BPF prog-id=43 op=UNLOAD Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.161000 audit: BPF prog-id=86 op=LOAD Mar 17 18:34:32.161000 audit: BPF prog-id=57 op=UNLOAD Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit: BPF prog-id=87 op=LOAD Mar 17 18:34:32.163000 audit: BPF prog-id=75 op=UNLOAD Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit: BPF prog-id=88 op=LOAD Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit: BPF prog-id=89 op=LOAD Mar 17 18:34:32.163000 audit: BPF prog-id=44 op=UNLOAD Mar 17 18:34:32.163000 audit: BPF prog-id=45 op=UNLOAD Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit: BPF prog-id=90 op=LOAD Mar 17 18:34:32.164000 audit: BPF prog-id=46 op=UNLOAD Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit: BPF prog-id=91 op=LOAD Mar 17 18:34:32.165000 audit: BPF prog-id=47 op=UNLOAD Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit: BPF prog-id=92 op=LOAD Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit: BPF prog-id=93 op=LOAD Mar 17 18:34:32.165000 audit: BPF prog-id=48 op=UNLOAD Mar 17 18:34:32.165000 audit: BPF prog-id=49 op=UNLOAD Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit: BPF prog-id=94 op=LOAD Mar 17 18:34:32.166000 audit: BPF prog-id=50 op=UNLOAD Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.166000 audit: BPF prog-id=95 op=LOAD Mar 17 18:34:32.166000 audit: BPF prog-id=63 op=UNLOAD Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit: BPF prog-id=96 op=LOAD Mar 17 18:34:32.167000 audit: BPF prog-id=51 op=UNLOAD Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit: BPF prog-id=97 op=LOAD Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.167000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.168000 audit: BPF prog-id=98 op=LOAD Mar 17 18:34:32.168000 audit: BPF prog-id=52 op=UNLOAD Mar 17 18:34:32.168000 audit: BPF prog-id=53 op=UNLOAD Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.169000 audit: BPF prog-id=99 op=LOAD Mar 17 18:34:32.169000 audit: BPF prog-id=54 op=UNLOAD Mar 17 18:34:32.183614 systemd[1]: Stopping kubelet.service... Mar 17 18:34:32.210565 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:34:32.210813 systemd[1]: Stopped kubelet.service. Mar 17 18:34:32.210914 systemd[1]: kubelet.service: Consumed 1.062s CPU time. Mar 17 18:34:32.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:32.213050 systemd[1]: Starting kubelet.service... Mar 17 18:34:32.322681 systemd[1]: Started kubelet.service. Mar 17 18:34:32.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:32.364118 kubelet[1968]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:34:32.364466 kubelet[1968]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Mar 17 18:34:32.364466 kubelet[1968]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:34:32.364466 kubelet[1968]: I0317 18:34:32.364305 1968 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:34:32.372938 kubelet[1968]: I0317 18:34:32.372280 1968 server.go:520] "Kubelet version" kubeletVersion="v1.32.0" Mar 17 18:34:32.372938 kubelet[1968]: I0317 18:34:32.372589 1968 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:34:32.373143 kubelet[1968]: I0317 18:34:32.373018 1968 server.go:954] "Client rotation is on, will bootstrap in background" Mar 17 18:34:32.374192 kubelet[1968]: I0317 18:34:32.374168 1968 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Mar 17 18:34:32.376156 kubelet[1968]: I0317 18:34:32.376121 1968 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:34:32.379567 kubelet[1968]: E0317 18:34:32.379523 1968 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:34:32.379567 kubelet[1968]: I0317 18:34:32.379555 1968 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:34:32.383455 kubelet[1968]: I0317 18:34:32.383426 1968 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:34:32.383676 kubelet[1968]: I0317 18:34:32.383602 1968 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:34:32.383898 kubelet[1968]: I0317 18:34:32.383638 1968 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:34:32.384115 kubelet[1968]: I0317 18:34:32.383902 1968 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:34:32.384115 kubelet[1968]: I0317 18:34:32.383912 1968 container_manager_linux.go:304] "Creating device plugin manager" Mar 17 18:34:32.384115 kubelet[1968]: I0317 18:34:32.383952 1968 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:34:32.384115 kubelet[1968]: I0317 18:34:32.384098 1968 kubelet.go:446] "Attempting to sync node with API server" Mar 17 18:34:32.384115 kubelet[1968]: I0317 18:34:32.384110 1968 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:34:32.384411 kubelet[1968]: I0317 18:34:32.384132 1968 kubelet.go:352] "Adding apiserver pod source" Mar 17 18:34:32.384411 kubelet[1968]: I0317 18:34:32.384142 1968 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:34:32.384830 kubelet[1968]: I0317 18:34:32.384770 1968 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:34:32.386144 kubelet[1968]: I0317 18:34:32.385692 1968 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:34:32.386732 kubelet[1968]: I0317 18:34:32.386715 1968 watchdog_linux.go:99] "Systemd watchdog is not enabled" Mar 17 18:34:32.386804 kubelet[1968]: I0317 18:34:32.386770 1968 server.go:1287] "Started kubelet" Mar 17 18:34:32.387579 kubelet[1968]: I0317 18:34:32.387519 1968 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:34:32.388273 kubelet[1968]: I0317 18:34:32.388185 1968 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:34:32.391331 kubelet[1968]: I0317 18:34:32.389406 1968 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:34:32.392863 kubelet[1968]: I0317 18:34:32.392806 1968 server.go:490] "Adding debug handlers to kubelet server" Mar 17 18:34:32.393000 audit[1968]: AVC avc: denied { mac_admin } for pid=1968 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.393000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:34:32.393000 audit[1968]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00050d200 a1=c000e03290 a2=c00050d1d0 a3=25 items=0 ppid=1 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:32.393000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:34:32.393000 audit[1968]: AVC avc: denied { mac_admin } for pid=1968 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.393000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:34:32.393000 audit[1968]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e52020 a1=c000e032a8 a2=c00050d290 a3=25 items=0 ppid=1 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:32.393000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:34:32.395404 kubelet[1968]: I0317 18:34:32.394917 1968 kubelet.go:1513] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:34:32.395404 kubelet[1968]: I0317 18:34:32.394958 1968 kubelet.go:1517] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Mar 17 18:34:32.395404 kubelet[1968]: I0317 18:34:32.394988 1968 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:34:32.404211 kubelet[1968]: I0317 18:34:32.404174 1968 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:34:32.405492 kubelet[1968]: I0317 18:34:32.405425 1968 volume_manager.go:297] "Starting Kubelet Volume Manager" Mar 17 18:34:32.405589 kubelet[1968]: E0317 18:34:32.405524 1968 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"localhost\" not found" Mar 17 18:34:32.405904 kubelet[1968]: I0317 18:34:32.405883 1968 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:34:32.406031 kubelet[1968]: I0317 18:34:32.406011 1968 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:34:32.407531 kubelet[1968]: I0317 18:34:32.407507 1968 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:34:32.407618 kubelet[1968]: I0317 18:34:32.407594 1968 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:34:32.409291 kubelet[1968]: I0317 18:34:32.408725 1968 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:34:32.409450 kubelet[1968]: E0317 18:34:32.409427 1968 kubelet.go:1561] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:34:32.419093 kubelet[1968]: I0317 18:34:32.419038 1968 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:34:32.419925 kubelet[1968]: I0317 18:34:32.419806 1968 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:34:32.419925 kubelet[1968]: I0317 18:34:32.419844 1968 status_manager.go:227] "Starting to sync pod status with apiserver" Mar 17 18:34:32.419925 kubelet[1968]: I0317 18:34:32.419864 1968 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Mar 17 18:34:32.419925 kubelet[1968]: I0317 18:34:32.419871 1968 kubelet.go:2388] "Starting kubelet main sync loop" Mar 17 18:34:32.419925 kubelet[1968]: E0317 18:34:32.419913 1968 kubelet.go:2412] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:34:32.520930 kubelet[1968]: E0317 18:34:32.520856 1968 kubelet.go:2412] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:34:32.568342 kubelet[1968]: I0317 18:34:32.568312 1968 cpu_manager.go:221] "Starting CPU manager" policy="none" Mar 17 18:34:32.568342 kubelet[1968]: I0317 18:34:32.568329 1968 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Mar 17 18:34:32.568342 kubelet[1968]: I0317 18:34:32.568345 1968 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:34:32.568513 kubelet[1968]: I0317 18:34:32.568478 1968 state_mem.go:88] "Updated default CPUSet" cpuSet="" Mar 17 18:34:32.568513 kubelet[1968]: I0317 18:34:32.568489 1968 state_mem.go:96] "Updated CPUSet assignments" assignments={} Mar 17 18:34:32.568513 kubelet[1968]: I0317 18:34:32.568506 1968 policy_none.go:49] "None policy: Start" Mar 17 18:34:32.568513 kubelet[1968]: I0317 18:34:32.568514 1968 memory_manager.go:186] "Starting memorymanager" policy="None" Mar 17 18:34:32.568610 kubelet[1968]: I0317 18:34:32.568523 1968 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:34:32.568634 kubelet[1968]: I0317 18:34:32.568612 1968 state_mem.go:75] "Updated machine memory state" Mar 17 18:34:32.571865 kubelet[1968]: I0317 18:34:32.571842 1968 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:34:32.570000 audit[1968]: AVC avc: denied { mac_admin } for pid=1968 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:32.570000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:34:32.570000 audit[1968]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d56270 a1=c0006563f0 a2=c000d56240 a3=25 items=0 ppid=1 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:32.570000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:34:32.572111 kubelet[1968]: I0317 18:34:32.571900 1968 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:34:32.572111 kubelet[1968]: I0317 18:34:32.572031 1968 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:34:32.572111 kubelet[1968]: I0317 18:34:32.572042 1968 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:34:32.572260 kubelet[1968]: I0317 18:34:32.572237 1968 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:34:32.574689 kubelet[1968]: E0317 18:34:32.573220 1968 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Mar 17 18:34:32.679117 kubelet[1968]: I0317 18:34:32.679056 1968 kubelet_node_status.go:76] "Attempting to register node" node="localhost" Mar 17 18:34:32.689117 kubelet[1968]: I0317 18:34:32.689050 1968 kubelet_node_status.go:125] "Node was previously registered" node="localhost" Mar 17 18:34:32.689405 kubelet[1968]: I0317 18:34:32.689155 1968 kubelet_node_status.go:79] "Successfully registered node" node="localhost" Mar 17 18:34:32.721672 kubelet[1968]: I0317 18:34:32.721633 1968 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Mar 17 18:34:32.721975 kubelet[1968]: I0317 18:34:32.721702 1968 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:32.722060 kubelet[1968]: I0317 18:34:32.721763 1968 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:32.807529 kubelet[1968]: I0317 18:34:32.807486 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ad41858f9cc3247b78cc75e62821b273-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"ad41858f9cc3247b78cc75e62821b273\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:32.807529 kubelet[1968]: I0317 18:34:32.807531 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:32.807758 kubelet[1968]: I0317 18:34:32.807554 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:32.807758 kubelet[1968]: I0317 18:34:32.807578 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:32.807758 kubelet[1968]: I0317 18:34:32.807600 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:32.807758 kubelet[1968]: I0317 18:34:32.807634 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3700e556aa2777679a324159272023f1-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"3700e556aa2777679a324159272023f1\") " pod="kube-system/kube-scheduler-localhost" Mar 17 18:34:32.807758 kubelet[1968]: I0317 18:34:32.807687 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ad41858f9cc3247b78cc75e62821b273-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"ad41858f9cc3247b78cc75e62821b273\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:32.807961 kubelet[1968]: I0317 18:34:32.807707 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ad41858f9cc3247b78cc75e62821b273-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"ad41858f9cc3247b78cc75e62821b273\") " pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:32.807961 kubelet[1968]: I0317 18:34:32.807728 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/cbbb394ff48414687df77e1bc213eeb5-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"cbbb394ff48414687df77e1bc213eeb5\") " pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:33.029004 kubelet[1968]: E0317 18:34:33.028941 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:33.030031 kubelet[1968]: E0317 18:34:33.030004 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:33.030205 kubelet[1968]: E0317 18:34:33.030191 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:33.387268 kubelet[1968]: I0317 18:34:33.387148 1968 apiserver.go:52] "Watching apiserver" Mar 17 18:34:33.406559 kubelet[1968]: I0317 18:34:33.406513 1968 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:34:33.560565 kubelet[1968]: I0317 18:34:33.560531 1968 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:33.560724 kubelet[1968]: I0317 18:34:33.560630 1968 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:33.560973 kubelet[1968]: I0317 18:34:33.560942 1968 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Mar 17 18:34:33.721558 kubelet[1968]: E0317 18:34:33.721529 1968 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Mar 17 18:34:33.722043 kubelet[1968]: E0317 18:34:33.722028 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:33.725424 kubelet[1968]: E0317 18:34:33.725378 1968 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Mar 17 18:34:33.725561 kubelet[1968]: E0317 18:34:33.725543 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:33.728669 kubelet[1968]: E0317 18:34:33.728636 1968 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Mar 17 18:34:33.729245 kubelet[1968]: E0317 18:34:33.729218 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:33.771371 kubelet[1968]: I0317 18:34:33.771320 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.771290534 podStartE2EDuration="1.771290534s" podCreationTimestamp="2025-03-17 18:34:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:34:33.750903385 +0000 UTC m=+1.422567425" watchObservedRunningTime="2025-03-17 18:34:33.771290534 +0000 UTC m=+1.442954574" Mar 17 18:34:33.791767 kubelet[1968]: I0317 18:34:33.791705 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.7916690069999999 podStartE2EDuration="1.791669007s" podCreationTimestamp="2025-03-17 18:34:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:34:33.771820235 +0000 UTC m=+1.443484275" watchObservedRunningTime="2025-03-17 18:34:33.791669007 +0000 UTC m=+1.463333047" Mar 17 18:34:33.811275 kubelet[1968]: I0317 18:34:33.811211 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.811189888 podStartE2EDuration="1.811189888s" podCreationTimestamp="2025-03-17 18:34:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:34:33.79253265 +0000 UTC m=+1.464196690" watchObservedRunningTime="2025-03-17 18:34:33.811189888 +0000 UTC m=+1.482853928" Mar 17 18:34:34.562268 kubelet[1968]: E0317 18:34:34.562224 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:34.562771 kubelet[1968]: E0317 18:34:34.562741 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:34.562982 kubelet[1968]: E0317 18:34:34.562956 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:35.025000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.028150 kernel: kauditd_printk_skb: 266 callbacks suppressed Mar 17 18:34:35.028219 kernel: audit: type=1400 audit(1742236475.025:797): avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.025000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e94200 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.038764 kernel: audit: type=1300 audit(1742236475.025:797): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e94200 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.038820 kernel: audit: type=1327 audit(1742236475.025:797): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.026000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.048568 kernel: audit: type=1400 audit(1742236475.026:798): avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.048611 kernel: audit: type=1300 audit(1742236475.026:798): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a2ca00 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.026000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a2ca00 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.026000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.060101 kernel: audit: type=1327 audit(1742236475.026:798): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.060134 kernel: audit: type=1400 audit(1742236475.026:799): avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.026000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.026000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a2cbc0 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.070652 kernel: audit: type=1300 audit(1742236475.026:799): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a2cbc0 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.070685 kernel: audit: type=1327 audit(1742236475.026:799): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.026000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.027000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.027000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a2cd80 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.027000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.081119 kernel: audit: type=1400 audit(1742236475.027:800): avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:34:35.188000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Mar 17 18:34:35.188000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00101e240 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:34:35.188000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:34:35.563350 kubelet[1968]: E0317 18:34:35.563317 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:35.563350 kubelet[1968]: E0317 18:34:35.563355 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:35.563736 kubelet[1968]: E0317 18:34:35.563563 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:37.786011 sudo[1336]: pam_unix(sudo:session): session closed for user root Mar 17 18:34:37.784000 audit[1336]: USER_END pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:34:37.785000 audit[1336]: CRED_DISP pid=1336 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:34:37.787637 sshd[1333]: pam_unix(sshd:session): session closed for user core Mar 17 18:34:37.787000 audit[1333]: USER_END pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:34:37.787000 audit[1333]: CRED_DISP pid=1333 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:34:37.790604 systemd[1]: sshd@6-10.0.0.17:22-10.0.0.1:37368.service: Deactivated successfully. Mar 17 18:34:37.791496 systemd[1]: session-7.scope: Deactivated successfully. Mar 17 18:34:37.791662 systemd[1]: session-7.scope: Consumed 4.754s CPU time. Mar 17 18:34:37.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.17:22-10.0.0.1:37368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:34:37.792553 systemd-logind[1191]: Session 7 logged out. Waiting for processes to exit. Mar 17 18:34:37.793564 systemd-logind[1191]: Removed session 7. Mar 17 18:34:38.313761 kubelet[1968]: I0317 18:34:38.313697 1968 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Mar 17 18:34:38.314218 kubelet[1968]: I0317 18:34:38.314130 1968 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Mar 17 18:34:38.314264 env[1206]: time="2025-03-17T18:34:38.313959988Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Mar 17 18:34:39.248210 systemd[1]: Created slice kubepods-besteffort-pod9b9fd78a_95f9_4577_a202_3a697932d820.slice. Mar 17 18:34:39.355043 kubelet[1968]: I0317 18:34:39.354997 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pfwl8\" (UniqueName: \"kubernetes.io/projected/9b9fd78a-95f9-4577-a202-3a697932d820-kube-api-access-pfwl8\") pod \"kube-proxy-t6qjt\" (UID: \"9b9fd78a-95f9-4577-a202-3a697932d820\") " pod="kube-system/kube-proxy-t6qjt" Mar 17 18:34:39.355043 kubelet[1968]: I0317 18:34:39.355037 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/9b9fd78a-95f9-4577-a202-3a697932d820-kube-proxy\") pod \"kube-proxy-t6qjt\" (UID: \"9b9fd78a-95f9-4577-a202-3a697932d820\") " pod="kube-system/kube-proxy-t6qjt" Mar 17 18:34:39.355043 kubelet[1968]: I0317 18:34:39.355053 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9b9fd78a-95f9-4577-a202-3a697932d820-xtables-lock\") pod \"kube-proxy-t6qjt\" (UID: \"9b9fd78a-95f9-4577-a202-3a697932d820\") " pod="kube-system/kube-proxy-t6qjt" Mar 17 18:34:39.355486 kubelet[1968]: I0317 18:34:39.355067 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9b9fd78a-95f9-4577-a202-3a697932d820-lib-modules\") pod \"kube-proxy-t6qjt\" (UID: \"9b9fd78a-95f9-4577-a202-3a697932d820\") " pod="kube-system/kube-proxy-t6qjt" Mar 17 18:34:39.421811 systemd[1]: Created slice kubepods-besteffort-pod3988e0b7_4371_470a_99cc_178a57cfdde0.slice. Mar 17 18:34:39.461101 kubelet[1968]: I0317 18:34:39.461053 1968 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Mar 17 18:34:39.556109 kubelet[1968]: E0317 18:34:39.555974 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:39.556109 kubelet[1968]: I0317 18:34:39.556022 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sxp5g\" (UniqueName: \"kubernetes.io/projected/3988e0b7-4371-470a-99cc-178a57cfdde0-kube-api-access-sxp5g\") pod \"tigera-operator-7d68577dc5-rclxv\" (UID: \"3988e0b7-4371-470a-99cc-178a57cfdde0\") " pod="tigera-operator/tigera-operator-7d68577dc5-rclxv" Mar 17 18:34:39.556532 kubelet[1968]: I0317 18:34:39.556074 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3988e0b7-4371-470a-99cc-178a57cfdde0-var-lib-calico\") pod \"tigera-operator-7d68577dc5-rclxv\" (UID: \"3988e0b7-4371-470a-99cc-178a57cfdde0\") " pod="tigera-operator/tigera-operator-7d68577dc5-rclxv" Mar 17 18:34:39.556596 env[1206]: time="2025-03-17T18:34:39.556549254Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-t6qjt,Uid:9b9fd78a-95f9-4577-a202-3a697932d820,Namespace:kube-system,Attempt:0,}" Mar 17 18:34:39.626877 env[1206]: time="2025-03-17T18:34:39.626790042Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:34:39.627063 env[1206]: time="2025-03-17T18:34:39.626844495Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:34:39.627063 env[1206]: time="2025-03-17T18:34:39.626870073Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:34:39.627063 env[1206]: time="2025-03-17T18:34:39.627038450Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/78b0c6e4028952cd06fb608eeedba493593c4b3168a9dc20a536490942db85b9 pid=2064 runtime=io.containerd.runc.v2 Mar 17 18:34:39.643745 systemd[1]: Started cri-containerd-78b0c6e4028952cd06fb608eeedba493593c4b3168a9dc20a536490942db85b9.scope. Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit: BPF prog-id=100 op=LOAD Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2064 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623063366534303238393532636430366662363038656565646261 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=2064 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623063366534303238393532636430366662363038656565646261 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit: BPF prog-id=101 op=LOAD Mar 17 18:34:39.654000 audit[2074]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c00009a350 items=0 ppid=2064 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623063366534303238393532636430366662363038656565646261 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.654000 audit: BPF prog-id=102 op=LOAD Mar 17 18:34:39.654000 audit[2074]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c00009a398 items=0 ppid=2064 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623063366534303238393532636430366662363038656565646261 Mar 17 18:34:39.654000 audit: BPF prog-id=102 op=UNLOAD Mar 17 18:34:39.655000 audit: BPF prog-id=101 op=UNLOAD Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { perfmon } for pid=2074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit[2074]: AVC avc: denied { bpf } for pid=2074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.655000 audit: BPF prog-id=103 op=LOAD Mar 17 18:34:39.655000 audit[2074]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c00009a7a8 items=0 ppid=2064 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623063366534303238393532636430366662363038656565646261 Mar 17 18:34:39.672722 env[1206]: time="2025-03-17T18:34:39.672659240Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-t6qjt,Uid:9b9fd78a-95f9-4577-a202-3a697932d820,Namespace:kube-system,Attempt:0,} returns sandbox id \"78b0c6e4028952cd06fb608eeedba493593c4b3168a9dc20a536490942db85b9\"" Mar 17 18:34:39.673792 kubelet[1968]: E0317 18:34:39.673760 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:39.678825 env[1206]: time="2025-03-17T18:34:39.676777656Z" level=info msg="CreateContainer within sandbox \"78b0c6e4028952cd06fb608eeedba493593c4b3168a9dc20a536490942db85b9\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Mar 17 18:34:39.725542 env[1206]: time="2025-03-17T18:34:39.725469367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7d68577dc5-rclxv,Uid:3988e0b7-4371-470a-99cc-178a57cfdde0,Namespace:tigera-operator,Attempt:0,}" Mar 17 18:34:39.853390 env[1206]: time="2025-03-17T18:34:39.853257817Z" level=info msg="CreateContainer within sandbox \"78b0c6e4028952cd06fb608eeedba493593c4b3168a9dc20a536490942db85b9\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"38b0b6f0aa76f668c0f01d0cfe6321f932b7a52d78607d425043d728703a69eb\"" Mar 17 18:34:39.854155 env[1206]: time="2025-03-17T18:34:39.854107820Z" level=info msg="StartContainer for \"38b0b6f0aa76f668c0f01d0cfe6321f932b7a52d78607d425043d728703a69eb\"" Mar 17 18:34:39.868434 systemd[1]: Started cri-containerd-38b0b6f0aa76f668c0f01d0cfe6321f932b7a52d78607d425043d728703a69eb.scope. Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f6b682d5b88 items=0 ppid=2064 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338623062366630616137366636363863306630316430636665363332 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.878000 audit: BPF prog-id=104 op=LOAD Mar 17 18:34:39.878000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0004081a8 items=0 ppid=2064 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338623062366630616137366636363863306630316430636665363332 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit: BPF prog-id=105 op=LOAD Mar 17 18:34:39.879000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0004081f8 items=0 ppid=2064 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338623062366630616137366636363863306630316430636665363332 Mar 17 18:34:39.879000 audit: BPF prog-id=105 op=UNLOAD Mar 17 18:34:39.879000 audit: BPF prog-id=104 op=UNLOAD Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.879000 audit: BPF prog-id=106 op=LOAD Mar 17 18:34:39.879000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000408288 items=0 ppid=2064 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338623062366630616137366636363863306630316430636665363332 Mar 17 18:34:39.891038 env[1206]: time="2025-03-17T18:34:39.890991223Z" level=info msg="StartContainer for \"38b0b6f0aa76f668c0f01d0cfe6321f932b7a52d78607d425043d728703a69eb\" returns successfully" Mar 17 18:34:39.904526 env[1206]: time="2025-03-17T18:34:39.904354934Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:34:39.904526 env[1206]: time="2025-03-17T18:34:39.904391382Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:34:39.904526 env[1206]: time="2025-03-17T18:34:39.904403306Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:34:39.904762 env[1206]: time="2025-03-17T18:34:39.904565100Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/32669b50147f526d11401fcc71e3033d2e4ecb8221b617b9bf941c633f9d1722 pid=2141 runtime=io.containerd.runc.v2 Mar 17 18:34:39.914137 systemd[1]: Started cri-containerd-32669b50147f526d11401fcc71e3033d2e4ecb8221b617b9bf941c633f9d1722.scope. Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit: BPF prog-id=107 op=LOAD Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2141 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363639623530313437663532366431313430316663633731653330 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2141 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363639623530313437663532366431313430316663633731653330 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit: BPF prog-id=108 op=LOAD Mar 17 18:34:39.924000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c2240 items=0 ppid=2141 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363639623530313437663532366431313430316663633731653330 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit: BPF prog-id=109 op=LOAD Mar 17 18:34:39.924000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c2288 items=0 ppid=2141 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363639623530313437663532366431313430316663633731653330 Mar 17 18:34:39.924000 audit: BPF prog-id=109 op=UNLOAD Mar 17 18:34:39.924000 audit: BPF prog-id=108 op=UNLOAD Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:39.924000 audit: BPF prog-id=110 op=LOAD Mar 17 18:34:39.924000 audit[2150]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c2698 items=0 ppid=2141 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332363639623530313437663532366431313430316663633731653330 Mar 17 18:34:39.951382 env[1206]: time="2025-03-17T18:34:39.951328085Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7d68577dc5-rclxv,Uid:3988e0b7-4371-470a-99cc-178a57cfdde0,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"32669b50147f526d11401fcc71e3033d2e4ecb8221b617b9bf941c633f9d1722\"" Mar 17 18:34:39.952766 env[1206]: time="2025-03-17T18:34:39.952713908Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\"" Mar 17 18:34:39.990000 audit[2211]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:39.990000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdbacd46f0 a2=0 a3=7ffdbacd46dc items=0 ppid=2118 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.990000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:34:39.990000 audit[2210]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:39.990000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc0c8ad270 a2=0 a3=7ffc0c8ad25c items=0 ppid=2118 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.990000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:34:39.991000 audit[2213]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:39.991000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdaa2f8110 a2=0 a3=7ffdaa2f80fc items=0 ppid=2118 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:34:39.991000 audit[2212]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:39.991000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff94ffd210 a2=0 a3=7fff94ffd1fc items=0 ppid=2118 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.991000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:34:39.994000 audit[2215]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:39.994000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde8c236b0 a2=0 a3=7ffde8c2369c items=0 ppid=2118 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.994000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:34:39.994000 audit[2216]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:39.994000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffcbd87b70 a2=0 a3=7fffcbd87b5c items=0 ppid=2118 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:39.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:34:40.095000 audit[2217]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.099420 kernel: kauditd_printk_skb: 185 callbacks suppressed Mar 17 18:34:40.099582 kernel: audit: type=1325 audit(1742236480.095:855): table=filter:44 family=2 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.099619 kernel: audit: type=1300 audit(1742236480.095:855): arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcb3f355f0 a2=0 a3=7ffcb3f355dc items=0 ppid=2118 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.095000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcb3f355f0 a2=0 a3=7ffcb3f355dc items=0 ppid=2118 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.095000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:34:40.108754 kernel: audit: type=1327 audit(1742236480.095:855): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:34:40.108881 kernel: audit: type=1325 audit(1742236480.097:856): table=filter:45 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.097000 audit[2219]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.110993 kernel: audit: type=1300 audit(1742236480.097:856): arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc7c48c4c0 a2=0 a3=7ffc7c48c4ac items=0 ppid=2118 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.097000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc7c48c4c0 a2=0 a3=7ffc7c48c4ac items=0 ppid=2118 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Mar 17 18:34:40.119461 kernel: audit: type=1327 audit(1742236480.097:856): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Mar 17 18:34:40.119517 kernel: audit: type=1325 audit(1742236480.100:857): table=filter:46 family=2 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.100000 audit[2222]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.100000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffecde7d210 a2=0 a3=7ffecde7d1fc items=0 ppid=2118 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.126116 kernel: audit: type=1300 audit(1742236480.100:857): arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffecde7d210 a2=0 a3=7ffecde7d1fc items=0 ppid=2118 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.126256 kernel: audit: type=1327 audit(1742236480.100:857): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Mar 17 18:34:40.100000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Mar 17 18:34:40.102000 audit[2223]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.132276 kernel: audit: type=1325 audit(1742236480.102:858): table=filter:47 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.102000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff546c56a0 a2=0 a3=7fff546c568c items=0 ppid=2118 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.102000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:34:40.103000 audit[2225]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.103000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff95259dc0 a2=0 a3=7fff95259dac items=0 ppid=2118 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:34:40.105000 audit[2226]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.105000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe31da3450 a2=0 a3=7ffe31da343c items=0 ppid=2118 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.105000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:34:40.107000 audit[2228]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.107000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc3743bd30 a2=0 a3=7ffc3743bd1c items=0 ppid=2118 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:34:40.109000 audit[2231]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.109000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffe67809e0 a2=0 a3=7fffe67809cc items=0 ppid=2118 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.109000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Mar 17 18:34:40.110000 audit[2232]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.110000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe54075870 a2=0 a3=7ffe5407585c items=0 ppid=2118 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:34:40.112000 audit[2234]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.112000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd1fb95e0 a2=0 a3=7fffd1fb95cc items=0 ppid=2118 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.112000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:34:40.113000 audit[2235]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.113000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe1c8fad50 a2=0 a3=7ffe1c8fad3c items=0 ppid=2118 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:34:40.115000 audit[2237]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.115000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc49408f90 a2=0 a3=7ffc49408f7c items=0 ppid=2118 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.115000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:34:40.118000 audit[2240]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.118000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe88830470 a2=0 a3=7ffe8883045c items=0 ppid=2118 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:34:40.121000 audit[2243]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.121000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff82efb8f0 a2=0 a3=7fff82efb8dc items=0 ppid=2118 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.121000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:34:40.124000 audit[2244]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.124000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdc97cc140 a2=0 a3=7ffdc97cc12c items=0 ppid=2118 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:34:40.126000 audit[2246]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.126000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdd0492f50 a2=0 a3=7ffdd0492f3c items=0 ppid=2118 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.126000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:34:40.129000 audit[2249]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.129000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe348a69b0 a2=0 a3=7ffe348a699c items=0 ppid=2118 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.129000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:34:40.130000 audit[2250]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.130000 audit[2250]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe88f65010 a2=0 a3=7ffe88f64ffc items=0 ppid=2118 pid=2250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.130000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:34:40.133000 audit[2252]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:34:40.133000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffdccddc190 a2=0 a3=7ffdccddc17c items=0 ppid=2118 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.133000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:34:40.227000 audit[2258]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:40.227000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe51fe2160 a2=0 a3=7ffe51fe214c items=0 ppid=2118 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.227000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:40.238000 audit[2258]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:40.238000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe51fe2160 a2=0 a3=7ffe51fe214c items=0 ppid=2118 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:40.240000 audit[2263]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.240000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcc6cfdbc0 a2=0 a3=7ffcc6cfdbac items=0 ppid=2118 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.240000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:34:40.241000 audit[2265]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.241000 audit[2265]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffff94b7170 a2=0 a3=7ffff94b715c items=0 ppid=2118 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.241000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Mar 17 18:34:40.245000 audit[2268]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.245000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdee7c7a50 a2=0 a3=7ffdee7c7a3c items=0 ppid=2118 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.245000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Mar 17 18:34:40.246000 audit[2269]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.246000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1009f410 a2=0 a3=7ffe1009f3fc items=0 ppid=2118 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.246000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:34:40.248000 audit[2271]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.248000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdd7b7d8e0 a2=0 a3=7ffdd7b7d8cc items=0 ppid=2118 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.248000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:34:40.249000 audit[2272]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.249000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6213eb70 a2=0 a3=7fff6213eb5c items=0 ppid=2118 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.249000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:34:40.251000 audit[2274]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.251000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc7be286e0 a2=0 a3=7ffc7be286cc items=0 ppid=2118 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.251000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Mar 17 18:34:40.254000 audit[2277]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.254000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff250c71a0 a2=0 a3=7fff250c718c items=0 ppid=2118 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:34:40.254000 audit[2278]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.254000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0492c8e0 a2=0 a3=7fff0492c8cc items=0 ppid=2118 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:34:40.257000 audit[2280]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.257000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff96a27c70 a2=0 a3=7fff96a27c5c items=0 ppid=2118 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.257000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:34:40.257000 audit[2281]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.257000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffebd4ab5d0 a2=0 a3=7ffebd4ab5bc items=0 ppid=2118 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.257000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:34:40.260000 audit[2283]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.260000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff2082cee0 a2=0 a3=7fff2082cecc items=0 ppid=2118 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.260000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:34:40.262000 audit[2286]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.262000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd40e70890 a2=0 a3=7ffd40e7087c items=0 ppid=2118 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.262000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:34:40.265000 audit[2289]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.265000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe847add10 a2=0 a3=7ffe847adcfc items=0 ppid=2118 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.265000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Mar 17 18:34:40.266000 audit[2290]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.266000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff377ae180 a2=0 a3=7fff377ae16c items=0 ppid=2118 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.266000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:34:40.268000 audit[2292]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.268000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffddddf8ee0 a2=0 a3=7ffddddf8ecc items=0 ppid=2118 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.268000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:34:40.272000 audit[2295]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.272000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc79f17120 a2=0 a3=7ffc79f1710c items=0 ppid=2118 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:34:40.273000 audit[2296]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.273000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7e4c9320 a2=0 a3=7ffd7e4c930c items=0 ppid=2118 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.273000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:34:40.275000 audit[2298]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.275000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc342a3260 a2=0 a3=7ffc342a324c items=0 ppid=2118 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:34:40.276000 audit[2299]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.276000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff358a4c30 a2=0 a3=7fff358a4c1c items=0 ppid=2118 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.276000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:34:40.279000 audit[2301]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.279000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe2601d5b0 a2=0 a3=7ffe2601d59c items=0 ppid=2118 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.279000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:34:40.282000 audit[2304]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:34:40.282000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda0b9a8f0 a2=0 a3=7ffda0b9a8dc items=0 ppid=2118 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.282000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:34:40.285000 audit[2306]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:34:40.285000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffc2292ad30 a2=0 a3=7ffc2292ad1c items=0 ppid=2118 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.285000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:40.285000 audit[2306]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:34:40.285000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc2292ad30 a2=0 a3=7ffc2292ad1c items=0 ppid=2118 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:40.285000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:40.573792 kubelet[1968]: E0317 18:34:40.573761 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:40.583616 kubelet[1968]: I0317 18:34:40.583538 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-t6qjt" podStartSLOduration=1.583515711 podStartE2EDuration="1.583515711s" podCreationTimestamp="2025-03-17 18:34:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:34:40.583153949 +0000 UTC m=+8.254817989" watchObservedRunningTime="2025-03-17 18:34:40.583515711 +0000 UTC m=+8.255179781" Mar 17 18:34:41.908730 kubelet[1968]: E0317 18:34:41.908659 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:42.576521 kubelet[1968]: E0317 18:34:42.576468 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:43.578252 kubelet[1968]: E0317 18:34:43.578198 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:43.892180 kubelet[1968]: E0317 18:34:43.891904 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:43.905812 kubelet[1968]: E0317 18:34:43.905781 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:44.579555 kubelet[1968]: E0317 18:34:44.579523 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:46.688044 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3223076819.mount: Deactivated successfully. Mar 17 18:34:48.811688 env[1206]: time="2025-03-17T18:34:48.811621648Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:48.815618 env[1206]: time="2025-03-17T18:34:48.815554616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:48.817658 env[1206]: time="2025-03-17T18:34:48.817615753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:48.819539 env[1206]: time="2025-03-17T18:34:48.819516518Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:fc9ea45f2475fd99db1b36d2ff180a50017b1a5ea0e82a171c6b439b3a620764,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:48.820124 env[1206]: time="2025-03-17T18:34:48.820101679Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\" returns image reference \"sha256:3045aa4a360d468ed15090f280e94c54bf4678269a6e863a9ebcf5b31534a346\"" Mar 17 18:34:48.822141 env[1206]: time="2025-03-17T18:34:48.822100449Z" level=info msg="CreateContainer within sandbox \"32669b50147f526d11401fcc71e3033d2e4ecb8221b617b9bf941c633f9d1722\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Mar 17 18:34:48.833463 env[1206]: time="2025-03-17T18:34:48.833403851Z" level=info msg="CreateContainer within sandbox \"32669b50147f526d11401fcc71e3033d2e4ecb8221b617b9bf941c633f9d1722\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"bc5892f6b8ed8227266399e6d2d64a470b5967df7011109b3eff1b83670ebf18\"" Mar 17 18:34:48.833876 env[1206]: time="2025-03-17T18:34:48.833839150Z" level=info msg="StartContainer for \"bc5892f6b8ed8227266399e6d2d64a470b5967df7011109b3eff1b83670ebf18\"" Mar 17 18:34:48.849987 systemd[1]: Started cri-containerd-bc5892f6b8ed8227266399e6d2d64a470b5967df7011109b3eff1b83670ebf18.scope. Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.863402 kernel: kauditd_printk_skb: 125 callbacks suppressed Mar 17 18:34:48.863485 kernel: audit: type=1400 audit(1742236488.862:900): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.869126 kernel: audit: type=1400 audit(1742236488.862:901): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.869249 kernel: audit: type=1400 audit(1742236488.862:902): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871846 kernel: audit: type=1400 audit(1742236488.862:903): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.874722 kernel: audit: type=1400 audit(1742236488.862:904): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.880612 kernel: audit: type=1400 audit(1742236488.862:905): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.880671 kernel: audit: type=1400 audit(1742236488.862:906): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.886516 kernel: audit: type=1400 audit(1742236488.862:907): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.886697 kernel: audit: type=1400 audit(1742236488.862:908): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.889329 kernel: audit: type=1400 audit(1742236488.866:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit: BPF prog-id=111 op=LOAD Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2141 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:48.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263353839326636623865643832323732363633393965366432643634 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2141 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:48.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263353839326636623865643832323732363633393965366432643634 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.866000 audit: BPF prog-id=112 op=LOAD Mar 17 18:34:48.866000 audit[2315]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a06f0 items=0 ppid=2141 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:48.866000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263353839326636623865643832323732363633393965366432643634 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.871000 audit: BPF prog-id=113 op=LOAD Mar 17 18:34:48.871000 audit[2315]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a0738 items=0 ppid=2141 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:48.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263353839326636623865643832323732363633393965366432643634 Mar 17 18:34:48.877000 audit: BPF prog-id=113 op=UNLOAD Mar 17 18:34:48.877000 audit: BPF prog-id=112 op=UNLOAD Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { perfmon } for pid=2315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit[2315]: AVC avc: denied { bpf } for pid=2315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:48.877000 audit: BPF prog-id=114 op=LOAD Mar 17 18:34:48.877000 audit[2315]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a0b48 items=0 ppid=2141 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:48.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263353839326636623865643832323732363633393965366432643634 Mar 17 18:34:48.908168 env[1206]: time="2025-03-17T18:34:48.908102811Z" level=info msg="StartContainer for \"bc5892f6b8ed8227266399e6d2d64a470b5967df7011109b3eff1b83670ebf18\" returns successfully" Mar 17 18:34:51.635000 audit[2349]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2349 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:51.635000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd73d87af0 a2=0 a3=7ffd73d87adc items=0 ppid=2118 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:51.635000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:51.645000 audit[2349]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2349 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:51.645000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd73d87af0 a2=0 a3=0 items=0 ppid=2118 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:51.645000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:51.656000 audit[2351]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:51.656000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd4dd2d630 a2=0 a3=7ffd4dd2d61c items=0 ppid=2118 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:51.656000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:51.662000 audit[2351]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:51.662000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd4dd2d630 a2=0 a3=0 items=0 ppid=2118 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:51.662000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:51.833969 kubelet[1968]: I0317 18:34:51.833888 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7d68577dc5-rclxv" podStartSLOduration=3.9651936880000003 podStartE2EDuration="12.833853254s" podCreationTimestamp="2025-03-17 18:34:39 +0000 UTC" firstStartedPulling="2025-03-17 18:34:39.952230557 +0000 UTC m=+7.623894597" lastFinishedPulling="2025-03-17 18:34:48.820890133 +0000 UTC m=+16.492554163" observedRunningTime="2025-03-17 18:34:49.599185017 +0000 UTC m=+17.270849057" watchObservedRunningTime="2025-03-17 18:34:51.833853254 +0000 UTC m=+19.505517294" Mar 17 18:34:51.841154 systemd[1]: Created slice kubepods-besteffort-pod998c7ec7_74f9_4326_884e_921e8d6ec30b.slice. Mar 17 18:34:51.852693 systemd[1]: Created slice kubepods-besteffort-pod572e874b_e44d_427a_a242_945044428c63.slice. Mar 17 18:34:51.930297 kubelet[1968]: I0317 18:34:51.930245 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-xtables-lock\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930525 kubelet[1968]: I0317 18:34:51.930292 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-cni-net-dir\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930525 kubelet[1968]: I0317 18:34:51.930328 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-cni-bin-dir\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930525 kubelet[1968]: I0317 18:34:51.930340 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-lib-modules\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930525 kubelet[1968]: I0317 18:34:51.930353 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-policysync\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930525 kubelet[1968]: I0317 18:34:51.930367 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-var-run-calico\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930652 kubelet[1968]: I0317 18:34:51.930380 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/572e874b-e44d-427a-a242-945044428c63-typha-certs\") pod \"calico-typha-75c88d6b9c-nj2z4\" (UID: \"572e874b-e44d-427a-a242-945044428c63\") " pod="calico-system/calico-typha-75c88d6b9c-nj2z4" Mar 17 18:34:51.930652 kubelet[1968]: I0317 18:34:51.930392 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-var-lib-calico\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930652 kubelet[1968]: I0317 18:34:51.930406 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mp5hr\" (UniqueName: \"kubernetes.io/projected/572e874b-e44d-427a-a242-945044428c63-kube-api-access-mp5hr\") pod \"calico-typha-75c88d6b9c-nj2z4\" (UID: \"572e874b-e44d-427a-a242-945044428c63\") " pod="calico-system/calico-typha-75c88d6b9c-nj2z4" Mar 17 18:34:51.930652 kubelet[1968]: I0317 18:34:51.930422 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/998c7ec7-74f9-4326-884e-921e8d6ec30b-tigera-ca-bundle\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930652 kubelet[1968]: I0317 18:34:51.930434 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-flexvol-driver-host\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930767 kubelet[1968]: I0317 18:34:51.930452 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qlv7d\" (UniqueName: \"kubernetes.io/projected/998c7ec7-74f9-4326-884e-921e8d6ec30b-kube-api-access-qlv7d\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930767 kubelet[1968]: I0317 18:34:51.930464 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/572e874b-e44d-427a-a242-945044428c63-tigera-ca-bundle\") pod \"calico-typha-75c88d6b9c-nj2z4\" (UID: \"572e874b-e44d-427a-a242-945044428c63\") " pod="calico-system/calico-typha-75c88d6b9c-nj2z4" Mar 17 18:34:51.930767 kubelet[1968]: I0317 18:34:51.930480 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/998c7ec7-74f9-4326-884e-921e8d6ec30b-node-certs\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.930767 kubelet[1968]: I0317 18:34:51.930493 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/998c7ec7-74f9-4326-884e-921e8d6ec30b-cni-log-dir\") pod \"calico-node-mftp9\" (UID: \"998c7ec7-74f9-4326-884e-921e8d6ec30b\") " pod="calico-system/calico-node-mftp9" Mar 17 18:34:51.940180 kubelet[1968]: E0317 18:34:51.940116 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:34:52.030874 kubelet[1968]: I0317 18:34:52.030827 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6bhjh\" (UniqueName: \"kubernetes.io/projected/c88f573a-e921-402f-948e-f2b285a2928f-kube-api-access-6bhjh\") pod \"csi-node-driver-4wbdt\" (UID: \"c88f573a-e921-402f-948e-f2b285a2928f\") " pod="calico-system/csi-node-driver-4wbdt" Mar 17 18:34:52.031041 kubelet[1968]: I0317 18:34:52.030910 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/c88f573a-e921-402f-948e-f2b285a2928f-registration-dir\") pod \"csi-node-driver-4wbdt\" (UID: \"c88f573a-e921-402f-948e-f2b285a2928f\") " pod="calico-system/csi-node-driver-4wbdt" Mar 17 18:34:52.031041 kubelet[1968]: I0317 18:34:52.030939 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/c88f573a-e921-402f-948e-f2b285a2928f-varrun\") pod \"csi-node-driver-4wbdt\" (UID: \"c88f573a-e921-402f-948e-f2b285a2928f\") " pod="calico-system/csi-node-driver-4wbdt" Mar 17 18:34:52.031041 kubelet[1968]: I0317 18:34:52.030952 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/c88f573a-e921-402f-948e-f2b285a2928f-kubelet-dir\") pod \"csi-node-driver-4wbdt\" (UID: \"c88f573a-e921-402f-948e-f2b285a2928f\") " pod="calico-system/csi-node-driver-4wbdt" Mar 17 18:34:52.031041 kubelet[1968]: I0317 18:34:52.030964 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/c88f573a-e921-402f-948e-f2b285a2928f-socket-dir\") pod \"csi-node-driver-4wbdt\" (UID: \"c88f573a-e921-402f-948e-f2b285a2928f\") " pod="calico-system/csi-node-driver-4wbdt" Mar 17 18:34:52.038831 kubelet[1968]: E0317 18:34:52.036329 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.038831 kubelet[1968]: W0317 18:34:52.036352 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.038831 kubelet[1968]: E0317 18:34:52.036389 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.038831 kubelet[1968]: E0317 18:34:52.036587 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.038831 kubelet[1968]: W0317 18:34:52.036595 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.038831 kubelet[1968]: E0317 18:34:52.036604 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.038831 kubelet[1968]: E0317 18:34:52.036719 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.038831 kubelet[1968]: W0317 18:34:52.036726 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.038831 kubelet[1968]: E0317 18:34:52.036733 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.038831 kubelet[1968]: E0317 18:34:52.036886 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.039294 kubelet[1968]: W0317 18:34:52.036893 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.039294 kubelet[1968]: E0317 18:34:52.036902 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.039294 kubelet[1968]: E0317 18:34:52.037013 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.039294 kubelet[1968]: W0317 18:34:52.037018 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.039294 kubelet[1968]: E0317 18:34:52.037025 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.039457 kubelet[1968]: E0317 18:34:52.039317 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.039457 kubelet[1968]: W0317 18:34:52.039325 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.039457 kubelet[1968]: E0317 18:34:52.039336 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.043477 kubelet[1968]: E0317 18:34:52.043453 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.043477 kubelet[1968]: W0317 18:34:52.043469 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.043592 kubelet[1968]: E0317 18:34:52.043482 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.045149 kubelet[1968]: E0317 18:34:52.045131 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.045149 kubelet[1968]: W0317 18:34:52.045145 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.045231 kubelet[1968]: E0317 18:34:52.045156 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.131616 kubelet[1968]: E0317 18:34:52.131578 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.131616 kubelet[1968]: W0317 18:34:52.131600 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.131616 kubelet[1968]: E0317 18:34:52.131617 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.131938 kubelet[1968]: E0317 18:34:52.131863 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.131938 kubelet[1968]: W0317 18:34:52.131871 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.131938 kubelet[1968]: E0317 18:34:52.131881 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.132118 kubelet[1968]: E0317 18:34:52.132094 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.132118 kubelet[1968]: W0317 18:34:52.132109 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.132175 kubelet[1968]: E0317 18:34:52.132124 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.132313 kubelet[1968]: E0317 18:34:52.132291 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.132313 kubelet[1968]: W0317 18:34:52.132303 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.132401 kubelet[1968]: E0317 18:34:52.132314 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.132469 kubelet[1968]: E0317 18:34:52.132456 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.132469 kubelet[1968]: W0317 18:34:52.132466 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.132529 kubelet[1968]: E0317 18:34:52.132477 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.132686 kubelet[1968]: E0317 18:34:52.132670 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.132686 kubelet[1968]: W0317 18:34:52.132680 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.132759 kubelet[1968]: E0317 18:34:52.132692 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.133017 kubelet[1968]: E0317 18:34:52.132990 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.133067 kubelet[1968]: W0317 18:34:52.133014 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.133067 kubelet[1968]: E0317 18:34:52.133045 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.133274 kubelet[1968]: E0317 18:34:52.133258 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.133274 kubelet[1968]: W0317 18:34:52.133272 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.133377 kubelet[1968]: E0317 18:34:52.133298 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.133458 kubelet[1968]: E0317 18:34:52.133436 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.133458 kubelet[1968]: W0317 18:34:52.133446 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.133648 kubelet[1968]: E0317 18:34:52.133495 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.133691 kubelet[1968]: E0317 18:34:52.133670 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.133731 kubelet[1968]: W0317 18:34:52.133688 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.133731 kubelet[1968]: E0317 18:34:52.133709 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.133958 kubelet[1968]: E0317 18:34:52.133942 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.133958 kubelet[1968]: W0317 18:34:52.133954 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.134027 kubelet[1968]: E0317 18:34:52.133969 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.134200 kubelet[1968]: E0317 18:34:52.134181 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.134200 kubelet[1968]: W0317 18:34:52.134194 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.134200 kubelet[1968]: E0317 18:34:52.134203 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.134464 kubelet[1968]: E0317 18:34:52.134449 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.134464 kubelet[1968]: W0317 18:34:52.134461 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.134551 kubelet[1968]: E0317 18:34:52.134497 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.134756 kubelet[1968]: E0317 18:34:52.134731 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.134756 kubelet[1968]: W0317 18:34:52.134742 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.134756 kubelet[1968]: E0317 18:34:52.134754 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.134989 kubelet[1968]: E0317 18:34:52.134975 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.134989 kubelet[1968]: W0317 18:34:52.134985 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.135086 kubelet[1968]: E0317 18:34:52.135016 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.135173 kubelet[1968]: E0317 18:34:52.135157 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.135173 kubelet[1968]: W0317 18:34:52.135169 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.135251 kubelet[1968]: E0317 18:34:52.135195 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.135337 kubelet[1968]: E0317 18:34:52.135323 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.135337 kubelet[1968]: W0317 18:34:52.135334 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.135430 kubelet[1968]: E0317 18:34:52.135358 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.135483 kubelet[1968]: E0317 18:34:52.135467 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.135483 kubelet[1968]: W0317 18:34:52.135477 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.135582 kubelet[1968]: E0317 18:34:52.135488 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.135686 kubelet[1968]: E0317 18:34:52.135660 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.135686 kubelet[1968]: W0317 18:34:52.135675 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.135686 kubelet[1968]: E0317 18:34:52.135689 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.135946 kubelet[1968]: E0317 18:34:52.135930 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.135946 kubelet[1968]: W0317 18:34:52.135945 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.136016 kubelet[1968]: E0317 18:34:52.135961 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.136144 kubelet[1968]: E0317 18:34:52.136129 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.136144 kubelet[1968]: W0317 18:34:52.136138 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.136240 kubelet[1968]: E0317 18:34:52.136152 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.136382 kubelet[1968]: E0317 18:34:52.136366 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.136382 kubelet[1968]: W0317 18:34:52.136376 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.136462 kubelet[1968]: E0317 18:34:52.136389 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.136594 kubelet[1968]: E0317 18:34:52.136574 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.136594 kubelet[1968]: W0317 18:34:52.136589 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.136677 kubelet[1968]: E0317 18:34:52.136605 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.136850 kubelet[1968]: E0317 18:34:52.136826 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.136850 kubelet[1968]: W0317 18:34:52.136844 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.136924 kubelet[1968]: E0317 18:34:52.136859 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.137060 kubelet[1968]: E0317 18:34:52.137046 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.137060 kubelet[1968]: W0317 18:34:52.137055 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.137060 kubelet[1968]: E0317 18:34:52.137063 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.139551 kubelet[1968]: E0317 18:34:52.139527 1968 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:34:52.139551 kubelet[1968]: W0317 18:34:52.139545 1968 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:34:52.139635 kubelet[1968]: E0317 18:34:52.139560 1968 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:34:52.144677 kubelet[1968]: E0317 18:34:52.144663 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:52.145197 env[1206]: time="2025-03-17T18:34:52.145152300Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mftp9,Uid:998c7ec7-74f9-4326-884e-921e8d6ec30b,Namespace:calico-system,Attempt:0,}" Mar 17 18:34:52.156810 kubelet[1968]: E0317 18:34:52.156783 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:52.157479 env[1206]: time="2025-03-17T18:34:52.157259277Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-75c88d6b9c-nj2z4,Uid:572e874b-e44d-427a-a242-945044428c63,Namespace:calico-system,Attempt:0,}" Mar 17 18:34:52.436343 env[1206]: time="2025-03-17T18:34:52.436263909Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:34:52.436343 env[1206]: time="2025-03-17T18:34:52.436300868Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:34:52.436343 env[1206]: time="2025-03-17T18:34:52.436312871Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:34:52.436577 env[1206]: time="2025-03-17T18:34:52.436440580Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546 pid=2401 runtime=io.containerd.runc.v2 Mar 17 18:34:52.437131 env[1206]: time="2025-03-17T18:34:52.436967040Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:34:52.437131 env[1206]: time="2025-03-17T18:34:52.437000162Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:34:52.437131 env[1206]: time="2025-03-17T18:34:52.437009169Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:34:52.437365 env[1206]: time="2025-03-17T18:34:52.437321948Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84b66b7064c4f53501f07545f97c0d90b785fae13e9807229ea32f2705f434b9 pid=2404 runtime=io.containerd.runc.v2 Mar 17 18:34:52.450585 systemd[1]: Started cri-containerd-718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546.scope. Mar 17 18:34:52.451333 systemd[1]: Started cri-containerd-84b66b7064c4f53501f07545f97c0d90b785fae13e9807229ea32f2705f434b9.scope. Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit: BPF prog-id=115 op=LOAD Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2401 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383534396330363036333134653030323635663064313430646431 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2401 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383534396330363036333134653030323635663064313430646431 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit: BPF prog-id=116 op=LOAD Mar 17 18:34:52.463000 audit[2420]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003a4ed0 items=0 ppid=2401 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383534396330363036333134653030323635663064313430646431 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.463000 audit: BPF prog-id=117 op=LOAD Mar 17 18:34:52.463000 audit[2420]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003a4f18 items=0 ppid=2401 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383534396330363036333134653030323635663064313430646431 Mar 17 18:34:52.464000 audit: BPF prog-id=117 op=UNLOAD Mar 17 18:34:52.464000 audit: BPF prog-id=116 op=UNLOAD Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { perfmon } for pid=2420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit[2420]: AVC avc: denied { bpf } for pid=2420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.464000 audit: BPF prog-id=118 op=LOAD Mar 17 18:34:52.464000 audit[2420]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003a5328 items=0 ppid=2401 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383534396330363036333134653030323635663064313430646431 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit: BPF prog-id=119 op=LOAD Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2404 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834623636623730363463346635333530316630373534356639376330 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2404 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834623636623730363463346635333530316630373534356639376330 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit: BPF prog-id=120 op=LOAD Mar 17 18:34:52.467000 audit[2422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000099300 items=0 ppid=2404 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834623636623730363463346635333530316630373534356639376330 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit: BPF prog-id=121 op=LOAD Mar 17 18:34:52.467000 audit[2422]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000099348 items=0 ppid=2404 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834623636623730363463346635333530316630373534356639376330 Mar 17 18:34:52.467000 audit: BPF prog-id=121 op=UNLOAD Mar 17 18:34:52.467000 audit: BPF prog-id=120 op=UNLOAD Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { perfmon } for pid=2422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit[2422]: AVC avc: denied { bpf } for pid=2422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:52.467000 audit: BPF prog-id=122 op=LOAD Mar 17 18:34:52.467000 audit[2422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000099758 items=0 ppid=2404 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834623636623730363463346635333530316630373534356639376330 Mar 17 18:34:52.475996 env[1206]: time="2025-03-17T18:34:52.475949464Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mftp9,Uid:998c7ec7-74f9-4326-884e-921e8d6ec30b,Namespace:calico-system,Attempt:0,} returns sandbox id \"718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546\"" Mar 17 18:34:52.476532 kubelet[1968]: E0317 18:34:52.476509 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:52.477563 env[1206]: time="2025-03-17T18:34:52.477532249Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\"" Mar 17 18:34:52.491234 env[1206]: time="2025-03-17T18:34:52.491185041Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-75c88d6b9c-nj2z4,Uid:572e874b-e44d-427a-a242-945044428c63,Namespace:calico-system,Attempt:0,} returns sandbox id \"84b66b7064c4f53501f07545f97c0d90b785fae13e9807229ea32f2705f434b9\"" Mar 17 18:34:52.491750 kubelet[1968]: E0317 18:34:52.491730 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:52.672000 audit[2470]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:52.672000 audit[2470]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffcb2d99420 a2=0 a3=7ffcb2d9940c items=0 ppid=2118 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.672000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:52.679000 audit[2470]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2470 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:34:52.679000 audit[2470]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcb2d99420 a2=0 a3=0 items=0 ppid=2118 pid=2470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:52.679000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:34:53.420957 kubelet[1968]: E0317 18:34:53.420905 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:34:54.068607 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3827442864.mount: Deactivated successfully. Mar 17 18:34:54.205330 env[1206]: time="2025-03-17T18:34:54.205272694Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:54.207163 env[1206]: time="2025-03-17T18:34:54.207134222Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:54.208693 env[1206]: time="2025-03-17T18:34:54.208657545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:54.210098 env[1206]: time="2025-03-17T18:34:54.210059439Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:a63f8b4ff531912d12d143664eb263fdbc6cd7b3ff4aa777dfb6e318a090462c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:54.210510 env[1206]: time="2025-03-17T18:34:54.210471222Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\" returns image reference \"sha256:2b7452b763ec8833ca0386ada5fd066e552a9b3b02b8538a5e34cc3d6d3840a6\"" Mar 17 18:34:54.211620 env[1206]: time="2025-03-17T18:34:54.211586839Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\"" Mar 17 18:34:54.213205 env[1206]: time="2025-03-17T18:34:54.213159253Z" level=info msg="CreateContainer within sandbox \"718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Mar 17 18:34:54.224183 env[1206]: time="2025-03-17T18:34:54.224146048Z" level=info msg="CreateContainer within sandbox \"718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f\"" Mar 17 18:34:54.224613 env[1206]: time="2025-03-17T18:34:54.224571628Z" level=info msg="StartContainer for \"37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f\"" Mar 17 18:34:54.241610 systemd[1]: Started cri-containerd-37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f.scope. Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.257143 kernel: kauditd_printk_skb: 179 callbacks suppressed Mar 17 18:34:54.257192 kernel: audit: type=1400 audit(1742236494.255:960): avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f44c77858e8 items=0 ppid=2401 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:54.265550 kernel: audit: type=1300 audit(1742236494.255:960): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f44c77858e8 items=0 ppid=2401 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:54.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337333735663436363935653739376461396165373434323261386333 Mar 17 18:34:54.269814 kernel: audit: type=1327 audit(1742236494.255:960): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337333735663436363935653739376461396165373434323261386333 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.272708 kernel: audit: type=1400 audit(1742236494.255:961): avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.272748 kernel: audit: type=1400 audit(1742236494.255:961): avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.278420 kernel: audit: type=1400 audit(1742236494.255:961): avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.283120 kernel: audit: type=1400 audit(1742236494.255:961): avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.283263 kernel: audit: type=1400 audit(1742236494.255:961): avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.287881 kernel: audit: type=1400 audit(1742236494.255:961): avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.287929 kernel: audit: type=1400 audit(1742236494.255:961): avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.255000 audit: BPF prog-id=123 op=LOAD Mar 17 18:34:54.255000 audit[2478]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00032dbd8 items=0 ppid=2401 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:54.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337333735663436363935653739376461396165373434323261386333 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.260000 audit: BPF prog-id=124 op=LOAD Mar 17 18:34:54.260000 audit[2478]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00032dc28 items=0 ppid=2401 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:54.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337333735663436363935653739376461396165373434323261386333 Mar 17 18:34:54.265000 audit: BPF prog-id=124 op=UNLOAD Mar 17 18:34:54.265000 audit: BPF prog-id=123 op=UNLOAD Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:54.265000 audit: BPF prog-id=125 op=LOAD Mar 17 18:34:54.265000 audit[2478]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00032dcb8 items=0 ppid=2401 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:54.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337333735663436363935653739376461396165373434323261386333 Mar 17 18:34:54.293697 env[1206]: time="2025-03-17T18:34:54.293615468Z" level=info msg="StartContainer for \"37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f\" returns successfully" Mar 17 18:34:54.301717 systemd[1]: cri-containerd-37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f.scope: Deactivated successfully. Mar 17 18:34:54.305000 audit: BPF prog-id=125 op=UNLOAD Mar 17 18:34:54.412668 env[1206]: time="2025-03-17T18:34:54.412521874Z" level=info msg="shim disconnected" id=37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f Mar 17 18:34:54.412668 env[1206]: time="2025-03-17T18:34:54.412578570Z" level=warning msg="cleaning up after shim disconnected" id=37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f namespace=k8s.io Mar 17 18:34:54.412668 env[1206]: time="2025-03-17T18:34:54.412588969Z" level=info msg="cleaning up dead shim" Mar 17 18:34:54.419355 env[1206]: time="2025-03-17T18:34:54.419315109Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:34:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2516 runtime=io.containerd.runc.v2\n" Mar 17 18:34:54.599387 kubelet[1968]: E0317 18:34:54.599353 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:55.069291 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-37375f46695e797da9ae74422a8c33aa97ec0f557f608e2eb5db316a1a8e913f-rootfs.mount: Deactivated successfully. Mar 17 18:34:55.421155 kubelet[1968]: E0317 18:34:55.421115 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:34:56.896100 env[1206]: time="2025-03-17T18:34:56.896028014Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:56.920234 env[1206]: time="2025-03-17T18:34:56.920183474Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:56.930932 env[1206]: time="2025-03-17T18:34:56.930911197Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:56.958847 env[1206]: time="2025-03-17T18:34:56.958812082Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:768a194e1115c73bcbf35edb7afd18a63e16e08d940c79993565b6a3cca2da7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:34:56.959361 env[1206]: time="2025-03-17T18:34:56.959340294Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\" returns image reference \"sha256:4cb3738506f5a9c530033d1e24fd6b9ec618518a2ec8b012ded33572be06ab44\"" Mar 17 18:34:56.960750 env[1206]: time="2025-03-17T18:34:56.960319503Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\"" Mar 17 18:34:56.969517 env[1206]: time="2025-03-17T18:34:56.969472408Z" level=info msg="CreateContainer within sandbox \"84b66b7064c4f53501f07545f97c0d90b785fae13e9807229ea32f2705f434b9\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Mar 17 18:34:57.163138 env[1206]: time="2025-03-17T18:34:57.163012945Z" level=info msg="CreateContainer within sandbox \"84b66b7064c4f53501f07545f97c0d90b785fae13e9807229ea32f2705f434b9\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"aff12a6eee5fb5a34ee08e81b4d598f9684be36ebd725274c98291fde39e5bf0\"" Mar 17 18:34:57.163535 env[1206]: time="2025-03-17T18:34:57.163514618Z" level=info msg="StartContainer for \"aff12a6eee5fb5a34ee08e81b4d598f9684be36ebd725274c98291fde39e5bf0\"" Mar 17 18:34:57.176898 systemd[1]: Started cri-containerd-aff12a6eee5fb5a34ee08e81b4d598f9684be36ebd725274c98291fde39e5bf0.scope. Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.189000 audit: BPF prog-id=126 op=LOAD Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2404 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:57.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166663132613665656535666235613334656530386538316234643539 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2404 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:57.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166663132613665656535666235613334656530386538316234643539 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.190000 audit: BPF prog-id=127 op=LOAD Mar 17 18:34:57.190000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d7d10 items=0 ppid=2404 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:57.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166663132613665656535666235613334656530386538316234643539 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.191000 audit: BPF prog-id=128 op=LOAD Mar 17 18:34:57.191000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d7d58 items=0 ppid=2404 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:57.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166663132613665656535666235613334656530386538316234643539 Mar 17 18:34:57.192000 audit: BPF prog-id=128 op=UNLOAD Mar 17 18:34:57.192000 audit: BPF prog-id=127 op=UNLOAD Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:34:57.192000 audit: BPF prog-id=129 op=LOAD Mar 17 18:34:57.192000 audit[2544]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c0168 items=0 ppid=2404 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:34:57.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166663132613665656535666235613334656530386538316234643539 Mar 17 18:34:57.420453 kubelet[1968]: E0317 18:34:57.420417 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:34:57.950330 env[1206]: time="2025-03-17T18:34:57.950275925Z" level=info msg="StartContainer for \"aff12a6eee5fb5a34ee08e81b4d598f9684be36ebd725274c98291fde39e5bf0\" returns successfully" Mar 17 18:34:58.953185 kubelet[1968]: E0317 18:34:58.953153 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:34:59.025678 kubelet[1968]: I0317 18:34:59.025492 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-75c88d6b9c-nj2z4" podStartSLOduration=3.557764188 podStartE2EDuration="8.025475375s" podCreationTimestamp="2025-03-17 18:34:51 +0000 UTC" firstStartedPulling="2025-03-17 18:34:52.492462483 +0000 UTC m=+20.164126523" lastFinishedPulling="2025-03-17 18:34:56.96017366 +0000 UTC m=+24.631837710" observedRunningTime="2025-03-17 18:34:59.025213784 +0000 UTC m=+26.696877844" watchObservedRunningTime="2025-03-17 18:34:59.025475375 +0000 UTC m=+26.697139435" Mar 17 18:34:59.420332 kubelet[1968]: E0317 18:34:59.420259 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:34:59.954986 kubelet[1968]: I0317 18:34:59.954950 1968 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:34:59.955627 kubelet[1968]: E0317 18:34:59.955330 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:01.421054 kubelet[1968]: E0317 18:35:01.420987 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:35:03.420829 kubelet[1968]: E0317 18:35:03.420712 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:35:03.540562 kubelet[1968]: I0317 18:35:03.540509 1968 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:35:03.540902 kubelet[1968]: E0317 18:35:03.540786 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:03.961986 kubelet[1968]: E0317 18:35:03.961954 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:04.060000 audit[2577]: NETFILTER_CFG table=filter:95 family=2 entries=17 op=nft_register_rule pid=2577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.063344 kernel: kauditd_printk_skb: 91 callbacks suppressed Mar 17 18:35:04.063418 kernel: audit: type=1325 audit(1742236504.060:985): table=filter:95 family=2 entries=17 op=nft_register_rule pid=2577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.060000 audit[2577]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeb2c336a0 a2=0 a3=7ffeb2c3368c items=0 ppid=2118 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.073944 kernel: audit: type=1300 audit(1742236504.060:985): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeb2c336a0 a2=0 a3=7ffeb2c3368c items=0 ppid=2118 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.060000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:04.081614 kernel: audit: type=1327 audit(1742236504.060:985): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:04.081724 kernel: audit: type=1325 audit(1742236504.073:986): table=nat:96 family=2 entries=19 op=nft_register_chain pid=2577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.073000 audit[2577]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2577 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.081809 env[1206]: time="2025-03-17T18:35:04.080140779Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:04.073000 audit[2577]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffeb2c336a0 a2=0 a3=7ffeb2c3368c items=0 ppid=2118 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.088054 env[1206]: time="2025-03-17T18:35:04.082590337Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:04.088054 env[1206]: time="2025-03-17T18:35:04.084560455Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:04.088054 env[1206]: time="2025-03-17T18:35:04.086576510Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21e759d51c90dfb34fc1397dc180dd3a3fb564c2b0580d2f61ffe108f2a3c94b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:04.088054 env[1206]: time="2025-03-17T18:35:04.087143524Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\" returns image reference \"sha256:7dd6ea186aba0d7a1791a79d426fe854527ca95192b26bbd19e8baf8373f7d0e\"" Mar 17 18:35:04.088234 kernel: audit: type=1300 audit(1742236504.073:986): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffeb2c336a0 a2=0 a3=7ffeb2c3368c items=0 ppid=2118 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.073000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:04.090863 env[1206]: time="2025-03-17T18:35:04.089610755Z" level=info msg="CreateContainer within sandbox \"718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Mar 17 18:35:04.091114 kernel: audit: type=1327 audit(1742236504.073:986): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:04.093000 audit[2579]: NETFILTER_CFG table=filter:97 family=2 entries=16 op=nft_register_rule pid=2579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.093000 audit[2579]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdc46fc4d0 a2=0 a3=7ffdc46fc4bc items=0 ppid=2118 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.101728 kernel: audit: type=1325 audit(1742236504.093:987): table=filter:97 family=2 entries=16 op=nft_register_rule pid=2579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.101825 kernel: audit: type=1300 audit(1742236504.093:987): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdc46fc4d0 a2=0 a3=7ffdc46fc4bc items=0 ppid=2118 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.093000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:04.105108 kernel: audit: type=1327 audit(1742236504.093:987): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:04.105000 audit[2579]: NETFILTER_CFG table=nat:98 family=2 entries=22 op=nft_register_rule pid=2579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.105000 audit[2579]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffdc46fc4d0 a2=0 a3=7ffdc46fc4bc items=0 ppid=2118 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.112167 kernel: audit: type=1325 audit(1742236504.105:988): table=nat:98 family=2 entries=22 op=nft_register_rule pid=2579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:04.105000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:04.113448 env[1206]: time="2025-03-17T18:35:04.113397496Z" level=info msg="CreateContainer within sandbox \"718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a\"" Mar 17 18:35:04.113971 env[1206]: time="2025-03-17T18:35:04.113950113Z" level=info msg="StartContainer for \"03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a\"" Mar 17 18:35:04.132600 systemd[1]: Started cri-containerd-03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a.scope. Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fc1a6b4e608 items=0 ppid=2401 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033653662303536623565366339613361366665643738653637366362 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit: BPF prog-id=130 op=LOAD Mar 17 18:35:04.147000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000263eb8 items=0 ppid=2401 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033653662303536623565366339613361366665643738653637366362 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit: BPF prog-id=131 op=LOAD Mar 17 18:35:04.147000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000263f08 items=0 ppid=2401 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033653662303536623565366339613361366665643738653637366362 Mar 17 18:35:04.147000 audit: BPF prog-id=131 op=UNLOAD Mar 17 18:35:04.147000 audit: BPF prog-id=130 op=UNLOAD Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:04.147000 audit: BPF prog-id=132 op=LOAD Mar 17 18:35:04.147000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000263f98 items=0 ppid=2401 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:04.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033653662303536623565366339613361366665643738653637366362 Mar 17 18:35:04.405408 env[1206]: time="2025-03-17T18:35:04.404600016Z" level=info msg="StartContainer for \"03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a\" returns successfully" Mar 17 18:35:04.966284 kubelet[1968]: E0317 18:35:04.966210 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:05.422742 kubelet[1968]: E0317 18:35:05.422626 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:35:05.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.17:22-10.0.0.1:41026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:05.794094 systemd[1]: Started sshd@7-10.0.0.17:22-10.0.0.1:41026.service. Mar 17 18:35:05.885000 audit[2617]: USER_ACCT pid=2617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:05.886556 sshd[2617]: Accepted publickey for core from 10.0.0.1 port 41026 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:05.886000 audit[2617]: CRED_ACQ pid=2617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:05.886000 audit[2617]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd3d55ec0 a2=3 a3=0 items=0 ppid=1 pid=2617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:05.886000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:05.887674 sshd[2617]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:05.901138 systemd-logind[1191]: New session 8 of user core. Mar 17 18:35:05.904133 systemd[1]: Started session-8.scope. Mar 17 18:35:05.907440 systemd[1]: cri-containerd-03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a.scope: Deactivated successfully. Mar 17 18:35:05.911000 audit: BPF prog-id=132 op=UNLOAD Mar 17 18:35:05.921000 audit[2617]: USER_START pid=2617 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:05.924000 audit[2624]: CRED_ACQ pid=2624 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:05.996408 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a-rootfs.mount: Deactivated successfully. Mar 17 18:35:06.008921 kubelet[1968]: I0317 18:35:06.008765 1968 kubelet_node_status.go:502] "Fast updating node status as it just became ready" Mar 17 18:35:06.296962 kubelet[1968]: E0317 18:35:06.296884 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:06.372831 env[1206]: time="2025-03-17T18:35:06.372753021Z" level=info msg="shim disconnected" id=03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a Mar 17 18:35:06.372831 env[1206]: time="2025-03-17T18:35:06.372811231Z" level=warning msg="cleaning up after shim disconnected" id=03e6b056b5e6c9a3a6fed78e676cb9d8f64d96d3c4cdd9cac8768761c337df6a namespace=k8s.io Mar 17 18:35:06.372831 env[1206]: time="2025-03-17T18:35:06.372824235Z" level=info msg="cleaning up dead shim" Mar 17 18:35:06.389813 env[1206]: time="2025-03-17T18:35:06.388206506Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:35:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2640 runtime=io.containerd.runc.v2\ntime=\"2025-03-17T18:35:06Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Mar 17 18:35:06.433231 systemd[1]: Created slice kubepods-besteffort-podc49dcab5_cce7_4080_8ab4_373d768fcabd.slice. Mar 17 18:35:06.445449 systemd[1]: Created slice kubepods-besteffort-pod6279e997_1d7d_4066_828e_e7a79ace4c93.slice. Mar 17 18:35:06.458480 systemd[1]: Created slice kubepods-besteffort-pod770c5f5a_046e_47e9_8ac7_76a9008768a6.slice. Mar 17 18:35:06.470714 systemd[1]: Created slice kubepods-burstable-pod6d87e993_d1bd_413d_a2dd_de47fa642094.slice. Mar 17 18:35:06.480657 systemd[1]: Created slice kubepods-burstable-pod3be65f5b_e61a_41bc_a43e_418e2fed97d7.slice. Mar 17 18:35:06.539641 sshd[2617]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:06.541000 audit[2617]: USER_END pid=2617 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:06.541000 audit[2617]: CRED_DISP pid=2617 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:06.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.17:22-10.0.0.1:41026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:06.544992 systemd[1]: sshd@7-10.0.0.17:22-10.0.0.1:41026.service: Deactivated successfully. Mar 17 18:35:06.546018 systemd[1]: session-8.scope: Deactivated successfully. Mar 17 18:35:06.547610 systemd-logind[1191]: Session 8 logged out. Waiting for processes to exit. Mar 17 18:35:06.549834 systemd-logind[1191]: Removed session 8. Mar 17 18:35:06.577252 kubelet[1968]: I0317 18:35:06.577167 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c49dcab5-cce7-4080-8ab4-373d768fcabd-calico-apiserver-certs\") pod \"calico-apiserver-64c69bdd46-t7wzj\" (UID: \"c49dcab5-cce7-4080-8ab4-373d768fcabd\") " pod="calico-apiserver/calico-apiserver-64c69bdd46-t7wzj" Mar 17 18:35:06.577252 kubelet[1968]: I0317 18:35:06.577239 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n62wn\" (UniqueName: \"kubernetes.io/projected/3be65f5b-e61a-41bc-a43e-418e2fed97d7-kube-api-access-n62wn\") pod \"coredns-668d6bf9bc-qr5wz\" (UID: \"3be65f5b-e61a-41bc-a43e-418e2fed97d7\") " pod="kube-system/coredns-668d6bf9bc-qr5wz" Mar 17 18:35:06.577474 kubelet[1968]: I0317 18:35:06.577272 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3be65f5b-e61a-41bc-a43e-418e2fed97d7-config-volume\") pod \"coredns-668d6bf9bc-qr5wz\" (UID: \"3be65f5b-e61a-41bc-a43e-418e2fed97d7\") " pod="kube-system/coredns-668d6bf9bc-qr5wz" Mar 17 18:35:06.577474 kubelet[1968]: I0317 18:35:06.577298 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g2d6q\" (UniqueName: \"kubernetes.io/projected/6d87e993-d1bd-413d-a2dd-de47fa642094-kube-api-access-g2d6q\") pod \"coredns-668d6bf9bc-gsgnn\" (UID: \"6d87e993-d1bd-413d-a2dd-de47fa642094\") " pod="kube-system/coredns-668d6bf9bc-gsgnn" Mar 17 18:35:06.577474 kubelet[1968]: I0317 18:35:06.577325 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4jfcp\" (UniqueName: \"kubernetes.io/projected/6279e997-1d7d-4066-828e-e7a79ace4c93-kube-api-access-4jfcp\") pod \"calico-apiserver-64c69bdd46-l589x\" (UID: \"6279e997-1d7d-4066-828e-e7a79ace4c93\") " pod="calico-apiserver/calico-apiserver-64c69bdd46-l589x" Mar 17 18:35:06.577474 kubelet[1968]: I0317 18:35:06.577350 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/770c5f5a-046e-47e9-8ac7-76a9008768a6-tigera-ca-bundle\") pod \"calico-kube-controllers-cdbb544d5-c6ssd\" (UID: \"770c5f5a-046e-47e9-8ac7-76a9008768a6\") " pod="calico-system/calico-kube-controllers-cdbb544d5-c6ssd" Mar 17 18:35:06.577474 kubelet[1968]: I0317 18:35:06.577372 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7w6tt\" (UniqueName: \"kubernetes.io/projected/770c5f5a-046e-47e9-8ac7-76a9008768a6-kube-api-access-7w6tt\") pod \"calico-kube-controllers-cdbb544d5-c6ssd\" (UID: \"770c5f5a-046e-47e9-8ac7-76a9008768a6\") " pod="calico-system/calico-kube-controllers-cdbb544d5-c6ssd" Mar 17 18:35:06.577702 kubelet[1968]: I0317 18:35:06.577409 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6279e997-1d7d-4066-828e-e7a79ace4c93-calico-apiserver-certs\") pod \"calico-apiserver-64c69bdd46-l589x\" (UID: \"6279e997-1d7d-4066-828e-e7a79ace4c93\") " pod="calico-apiserver/calico-apiserver-64c69bdd46-l589x" Mar 17 18:35:06.577702 kubelet[1968]: I0317 18:35:06.577433 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6d87e993-d1bd-413d-a2dd-de47fa642094-config-volume\") pod \"coredns-668d6bf9bc-gsgnn\" (UID: \"6d87e993-d1bd-413d-a2dd-de47fa642094\") " pod="kube-system/coredns-668d6bf9bc-gsgnn" Mar 17 18:35:06.577702 kubelet[1968]: I0317 18:35:06.577456 1968 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pwk24\" (UniqueName: \"kubernetes.io/projected/c49dcab5-cce7-4080-8ab4-373d768fcabd-kube-api-access-pwk24\") pod \"calico-apiserver-64c69bdd46-t7wzj\" (UID: \"c49dcab5-cce7-4080-8ab4-373d768fcabd\") " pod="calico-apiserver/calico-apiserver-64c69bdd46-t7wzj" Mar 17 18:35:06.738567 env[1206]: time="2025-03-17T18:35:06.738503473Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-t7wzj,Uid:c49dcab5-cce7-4080-8ab4-373d768fcabd,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:35:06.752605 env[1206]: time="2025-03-17T18:35:06.752548495Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-l589x,Uid:6279e997-1d7d-4066-828e-e7a79ace4c93,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:35:06.765641 env[1206]: time="2025-03-17T18:35:06.765582497Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cdbb544d5-c6ssd,Uid:770c5f5a-046e-47e9-8ac7-76a9008768a6,Namespace:calico-system,Attempt:0,}" Mar 17 18:35:06.775020 kubelet[1968]: E0317 18:35:06.774954 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:06.775662 env[1206]: time="2025-03-17T18:35:06.775582486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gsgnn,Uid:6d87e993-d1bd-413d-a2dd-de47fa642094,Namespace:kube-system,Attempt:0,}" Mar 17 18:35:06.786480 kubelet[1968]: E0317 18:35:06.786425 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:06.787172 env[1206]: time="2025-03-17T18:35:06.787129649Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qr5wz,Uid:3be65f5b-e61a-41bc-a43e-418e2fed97d7,Namespace:kube-system,Attempt:0,}" Mar 17 18:35:07.053592 env[1206]: time="2025-03-17T18:35:07.053497896Z" level=error msg="Failed to destroy network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.056621 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312-shm.mount: Deactivated successfully. Mar 17 18:35:07.058876 env[1206]: time="2025-03-17T18:35:07.058822418Z" level=error msg="encountered an error cleaning up failed sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.059127 env[1206]: time="2025-03-17T18:35:07.059048413Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-t7wzj,Uid:c49dcab5-cce7-4080-8ab4-373d768fcabd,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.059567 kubelet[1968]: E0317 18:35:07.059500 1968 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.059864 kubelet[1968]: E0317 18:35:07.059596 1968 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64c69bdd46-t7wzj" Mar 17 18:35:07.059864 kubelet[1968]: E0317 18:35:07.059622 1968 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64c69bdd46-t7wzj" Mar 17 18:35:07.059864 kubelet[1968]: E0317 18:35:07.059671 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64c69bdd46-t7wzj_calico-apiserver(c49dcab5-cce7-4080-8ab4-373d768fcabd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64c69bdd46-t7wzj_calico-apiserver(c49dcab5-cce7-4080-8ab4-373d768fcabd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64c69bdd46-t7wzj" podUID="c49dcab5-cce7-4080-8ab4-373d768fcabd" Mar 17 18:35:07.062759 env[1206]: time="2025-03-17T18:35:07.062692341Z" level=error msg="Failed to destroy network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.063690 env[1206]: time="2025-03-17T18:35:07.063603702Z" level=error msg="Failed to destroy network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.064132 env[1206]: time="2025-03-17T18:35:07.064098230Z" level=error msg="encountered an error cleaning up failed sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.064298 env[1206]: time="2025-03-17T18:35:07.064261476Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cdbb544d5-c6ssd,Uid:770c5f5a-046e-47e9-8ac7-76a9008768a6,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.064930 kubelet[1968]: E0317 18:35:07.064568 1968 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.064930 kubelet[1968]: E0317 18:35:07.064632 1968 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-cdbb544d5-c6ssd" Mar 17 18:35:07.064930 kubelet[1968]: E0317 18:35:07.064676 1968 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-cdbb544d5-c6ssd" Mar 17 18:35:07.065167 kubelet[1968]: E0317 18:35:07.064723 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-cdbb544d5-c6ssd_calico-system(770c5f5a-046e-47e9-8ac7-76a9008768a6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-cdbb544d5-c6ssd_calico-system(770c5f5a-046e-47e9-8ac7-76a9008768a6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-cdbb544d5-c6ssd" podUID="770c5f5a-046e-47e9-8ac7-76a9008768a6" Mar 17 18:35:07.065607 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92-shm.mount: Deactivated successfully. Mar 17 18:35:07.068833 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00-shm.mount: Deactivated successfully. Mar 17 18:35:07.070689 env[1206]: time="2025-03-17T18:35:07.070619088Z" level=error msg="encountered an error cleaning up failed sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.070783 env[1206]: time="2025-03-17T18:35:07.070707243Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-l589x,Uid:6279e997-1d7d-4066-828e-e7a79ace4c93,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.070996 kubelet[1968]: E0317 18:35:07.070944 1968 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.071065 kubelet[1968]: E0317 18:35:07.071021 1968 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64c69bdd46-l589x" Mar 17 18:35:07.071065 kubelet[1968]: E0317 18:35:07.071055 1968 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-64c69bdd46-l589x" Mar 17 18:35:07.071223 kubelet[1968]: E0317 18:35:07.071192 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-64c69bdd46-l589x_calico-apiserver(6279e997-1d7d-4066-828e-e7a79ace4c93)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-64c69bdd46-l589x_calico-apiserver(6279e997-1d7d-4066-828e-e7a79ace4c93)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64c69bdd46-l589x" podUID="6279e997-1d7d-4066-828e-e7a79ace4c93" Mar 17 18:35:07.086971 env[1206]: time="2025-03-17T18:35:07.086899102Z" level=error msg="Failed to destroy network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.087375 env[1206]: time="2025-03-17T18:35:07.087343155Z" level=error msg="encountered an error cleaning up failed sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.087512 env[1206]: time="2025-03-17T18:35:07.087476756Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qr5wz,Uid:3be65f5b-e61a-41bc-a43e-418e2fed97d7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.087748 kubelet[1968]: E0317 18:35:07.087698 1968 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.087818 kubelet[1968]: E0317 18:35:07.087770 1968 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-qr5wz" Mar 17 18:35:07.087818 kubelet[1968]: E0317 18:35:07.087802 1968 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-qr5wz" Mar 17 18:35:07.087982 kubelet[1968]: E0317 18:35:07.087857 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-qr5wz_kube-system(3be65f5b-e61a-41bc-a43e-418e2fed97d7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-qr5wz_kube-system(3be65f5b-e61a-41bc-a43e-418e2fed97d7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-qr5wz" podUID="3be65f5b-e61a-41bc-a43e-418e2fed97d7" Mar 17 18:35:07.089704 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea-shm.mount: Deactivated successfully. Mar 17 18:35:07.091887 env[1206]: time="2025-03-17T18:35:07.091826259Z" level=error msg="Failed to destroy network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.092310 env[1206]: time="2025-03-17T18:35:07.092267377Z" level=error msg="encountered an error cleaning up failed sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.092367 env[1206]: time="2025-03-17T18:35:07.092319535Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gsgnn,Uid:6d87e993-d1bd-413d-a2dd-de47fa642094,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.092552 kubelet[1968]: E0317 18:35:07.092510 1968 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.092614 kubelet[1968]: E0317 18:35:07.092575 1968 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-gsgnn" Mar 17 18:35:07.092614 kubelet[1968]: E0317 18:35:07.092601 1968 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-gsgnn" Mar 17 18:35:07.092696 kubelet[1968]: E0317 18:35:07.092656 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-gsgnn_kube-system(6d87e993-d1bd-413d-a2dd-de47fa642094)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-gsgnn_kube-system(6d87e993-d1bd-413d-a2dd-de47fa642094)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-gsgnn" podUID="6d87e993-d1bd-413d-a2dd-de47fa642094" Mar 17 18:35:07.288674 kubelet[1968]: E0317 18:35:07.288623 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:07.291387 env[1206]: time="2025-03-17T18:35:07.291151616Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\"" Mar 17 18:35:07.291975 kubelet[1968]: I0317 18:35:07.291940 1968 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:07.292901 env[1206]: time="2025-03-17T18:35:07.292637324Z" level=info msg="StopPodSandbox for \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\"" Mar 17 18:35:07.294287 kubelet[1968]: I0317 18:35:07.293707 1968 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:07.295937 kubelet[1968]: I0317 18:35:07.295900 1968 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:07.297581 kubelet[1968]: I0317 18:35:07.297546 1968 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:07.297938 env[1206]: time="2025-03-17T18:35:07.297893839Z" level=info msg="StopPodSandbox for \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\"" Mar 17 18:35:07.298178 env[1206]: time="2025-03-17T18:35:07.298101499Z" level=info msg="StopPodSandbox for \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\"" Mar 17 18:35:07.301338 kubelet[1968]: I0317 18:35:07.301303 1968 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:07.301462 env[1206]: time="2025-03-17T18:35:07.301362860Z" level=info msg="StopPodSandbox for \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\"" Mar 17 18:35:07.302017 env[1206]: time="2025-03-17T18:35:07.301963217Z" level=info msg="StopPodSandbox for \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\"" Mar 17 18:35:07.337097 env[1206]: time="2025-03-17T18:35:07.335793369Z" level=error msg="StopPodSandbox for \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\" failed" error="failed to destroy network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.337724 kubelet[1968]: E0317 18:35:07.337673 1968 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:07.337800 kubelet[1968]: E0317 18:35:07.337747 1968 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c"} Mar 17 18:35:07.337870 kubelet[1968]: E0317 18:35:07.337839 1968 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6d87e993-d1bd-413d-a2dd-de47fa642094\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:35:07.338013 kubelet[1968]: E0317 18:35:07.337964 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6d87e993-d1bd-413d-a2dd-de47fa642094\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-gsgnn" podUID="6d87e993-d1bd-413d-a2dd-de47fa642094" Mar 17 18:35:07.356372 env[1206]: time="2025-03-17T18:35:07.356311686Z" level=error msg="StopPodSandbox for \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\" failed" error="failed to destroy network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.358507 kubelet[1968]: E0317 18:35:07.357595 1968 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:07.358507 kubelet[1968]: E0317 18:35:07.357650 1968 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00"} Mar 17 18:35:07.358507 kubelet[1968]: E0317 18:35:07.357684 1968 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"770c5f5a-046e-47e9-8ac7-76a9008768a6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:35:07.358507 kubelet[1968]: E0317 18:35:07.357712 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"770c5f5a-046e-47e9-8ac7-76a9008768a6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-cdbb544d5-c6ssd" podUID="770c5f5a-046e-47e9-8ac7-76a9008768a6" Mar 17 18:35:07.359021 env[1206]: time="2025-03-17T18:35:07.358977870Z" level=error msg="StopPodSandbox for \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\" failed" error="failed to destroy network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.359267 env[1206]: time="2025-03-17T18:35:07.359180080Z" level=error msg="StopPodSandbox for \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\" failed" error="failed to destroy network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.359314 kubelet[1968]: E0317 18:35:07.359293 1968 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:07.359356 kubelet[1968]: E0317 18:35:07.359325 1968 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea"} Mar 17 18:35:07.359356 kubelet[1968]: E0317 18:35:07.359353 1968 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3be65f5b-e61a-41bc-a43e-418e2fed97d7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:35:07.359438 kubelet[1968]: E0317 18:35:07.359371 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3be65f5b-e61a-41bc-a43e-418e2fed97d7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-qr5wz" podUID="3be65f5b-e61a-41bc-a43e-418e2fed97d7" Mar 17 18:35:07.359583 kubelet[1968]: E0317 18:35:07.359524 1968 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:07.359583 kubelet[1968]: E0317 18:35:07.359598 1968 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92"} Mar 17 18:35:07.359912 kubelet[1968]: E0317 18:35:07.359651 1968 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6279e997-1d7d-4066-828e-e7a79ace4c93\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:35:07.359912 kubelet[1968]: E0317 18:35:07.359683 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6279e997-1d7d-4066-828e-e7a79ace4c93\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64c69bdd46-l589x" podUID="6279e997-1d7d-4066-828e-e7a79ace4c93" Mar 17 18:35:07.360858 env[1206]: time="2025-03-17T18:35:07.360801142Z" level=error msg="StopPodSandbox for \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\" failed" error="failed to destroy network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.361058 kubelet[1968]: E0317 18:35:07.361023 1968 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:07.361148 kubelet[1968]: E0317 18:35:07.361070 1968 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312"} Mar 17 18:35:07.361148 kubelet[1968]: E0317 18:35:07.361123 1968 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c49dcab5-cce7-4080-8ab4-373d768fcabd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:35:07.361233 kubelet[1968]: E0317 18:35:07.361148 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c49dcab5-cce7-4080-8ab4-373d768fcabd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-64c69bdd46-t7wzj" podUID="c49dcab5-cce7-4080-8ab4-373d768fcabd" Mar 17 18:35:07.428131 systemd[1]: Created slice kubepods-besteffort-podc88f573a_e921_402f_948e_f2b285a2928f.slice. Mar 17 18:35:07.430949 env[1206]: time="2025-03-17T18:35:07.430897416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4wbdt,Uid:c88f573a-e921-402f-948e-f2b285a2928f,Namespace:calico-system,Attempt:0,}" Mar 17 18:35:07.490576 env[1206]: time="2025-03-17T18:35:07.490481402Z" level=error msg="Failed to destroy network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.491007 env[1206]: time="2025-03-17T18:35:07.490960360Z" level=error msg="encountered an error cleaning up failed sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.491096 env[1206]: time="2025-03-17T18:35:07.491041844Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4wbdt,Uid:c88f573a-e921-402f-948e-f2b285a2928f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.491361 kubelet[1968]: E0317 18:35:07.491313 1968 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:07.491445 kubelet[1968]: E0317 18:35:07.491379 1968 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-4wbdt" Mar 17 18:35:07.491445 kubelet[1968]: E0317 18:35:07.491431 1968 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-4wbdt" Mar 17 18:35:07.491525 kubelet[1968]: E0317 18:35:07.491472 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-4wbdt_calico-system(c88f573a-e921-402f-948e-f2b285a2928f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-4wbdt_calico-system(c88f573a-e921-402f-948e-f2b285a2928f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:35:07.998307 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c-shm.mount: Deactivated successfully. Mar 17 18:35:08.304004 kubelet[1968]: I0317 18:35:08.303895 1968 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:08.304475 env[1206]: time="2025-03-17T18:35:08.304439597Z" level=info msg="StopPodSandbox for \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\"" Mar 17 18:35:08.328165 env[1206]: time="2025-03-17T18:35:08.328092877Z" level=error msg="StopPodSandbox for \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\" failed" error="failed to destroy network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:35:08.328434 kubelet[1968]: E0317 18:35:08.328346 1968 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:08.328434 kubelet[1968]: E0317 18:35:08.328416 1968 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18"} Mar 17 18:35:08.328580 kubelet[1968]: E0317 18:35:08.328459 1968 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c88f573a-e921-402f-948e-f2b285a2928f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:35:08.328580 kubelet[1968]: E0317 18:35:08.328489 1968 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c88f573a-e921-402f-948e-f2b285a2928f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-4wbdt" podUID="c88f573a-e921-402f-948e-f2b285a2928f" Mar 17 18:35:11.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.17:22-10.0.0.1:41034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:11.545516 systemd[1]: Started sshd@8-10.0.0.17:22-10.0.0.1:41034.service. Mar 17 18:35:11.546795 kernel: kauditd_printk_skb: 57 callbacks suppressed Mar 17 18:35:11.546858 kernel: audit: type=1130 audit(1742236511.544:1005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.17:22-10.0.0.1:41034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:11.848000 audit[3036]: USER_ACCT pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.849922 sshd[3036]: Accepted publickey for core from 10.0.0.1 port 41034 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:11.851635 sshd[3036]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:11.850000 audit[3036]: CRED_ACQ pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.862987 systemd-logind[1191]: New session 9 of user core. Mar 17 18:35:11.863868 systemd[1]: Started session-9.scope. Mar 17 18:35:11.865458 kernel: audit: type=1101 audit(1742236511.848:1006): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.865529 kernel: audit: type=1103 audit(1742236511.850:1007): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.865552 kernel: audit: type=1006 audit(1742236511.850:1008): pid=3036 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Mar 17 18:35:11.850000 audit[3036]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe975e4020 a2=3 a3=0 items=0 ppid=1 pid=3036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:11.872041 kernel: audit: type=1300 audit(1742236511.850:1008): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe975e4020 a2=3 a3=0 items=0 ppid=1 pid=3036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:11.872105 kernel: audit: type=1327 audit(1742236511.850:1008): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:11.850000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:11.867000 audit[3036]: USER_START pid=3036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.888824 kernel: audit: type=1105 audit(1742236511.867:1009): pid=3036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.888891 kernel: audit: type=1103 audit(1742236511.870:1010): pid=3038 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.870000 audit[3038]: CRED_ACQ pid=3038 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.993647 sshd[3036]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:11.993000 audit[3036]: USER_END pid=3036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.996509 systemd[1]: sshd@8-10.0.0.17:22-10.0.0.1:41034.service: Deactivated successfully. Mar 17 18:35:11.997154 systemd[1]: session-9.scope: Deactivated successfully. Mar 17 18:35:11.997801 systemd-logind[1191]: Session 9 logged out. Waiting for processes to exit. Mar 17 18:35:11.998539 systemd-logind[1191]: Removed session 9. Mar 17 18:35:11.993000 audit[3036]: CRED_DISP pid=3036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:12.002968 kernel: audit: type=1106 audit(1742236511.993:1011): pid=3036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:12.003023 kernel: audit: type=1104 audit(1742236511.993:1012): pid=3036 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:11.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.17:22-10.0.0.1:41034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:15.812458 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2951653989.mount: Deactivated successfully. Mar 17 18:35:16.317678 env[1206]: time="2025-03-17T18:35:16.317610865Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:16.319825 env[1206]: time="2025-03-17T18:35:16.319793089Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:16.321926 env[1206]: time="2025-03-17T18:35:16.321894641Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:16.323712 env[1206]: time="2025-03-17T18:35:16.323670112Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:99c3917516efe1f807a0cfdf2d14b628b7c5cc6bd8a9ee5a253154f31756bea1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:16.324177 env[1206]: time="2025-03-17T18:35:16.324141056Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\" returns image reference \"sha256:feb26d4585d68e875d9bd9bd6c27ea9f2d5c9ed9ef70f8b8cb0ebb0559a1d664\"" Mar 17 18:35:16.333957 env[1206]: time="2025-03-17T18:35:16.333883112Z" level=info msg="CreateContainer within sandbox \"718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Mar 17 18:35:16.351932 env[1206]: time="2025-03-17T18:35:16.351865186Z" level=info msg="CreateContainer within sandbox \"718549c0606314e00265f0d140dd12306db9ed7c09772725213200a635006546\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"0653c314849bf2a1709312f98cd70a37d4e0db2fd5e4335b1b1d1d4822baf02f\"" Mar 17 18:35:16.352596 env[1206]: time="2025-03-17T18:35:16.352477615Z" level=info msg="StartContainer for \"0653c314849bf2a1709312f98cd70a37d4e0db2fd5e4335b1b1d1d4822baf02f\"" Mar 17 18:35:16.369718 systemd[1]: Started cri-containerd-0653c314849bf2a1709312f98cd70a37d4e0db2fd5e4335b1b1d1d4822baf02f.scope. Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f1ffc1142c8 items=0 ppid=2401 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:16.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353363333134383439626632613137303933313266393863643730 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit: BPF prog-id=133 op=LOAD Mar 17 18:35:16.385000 audit[3059]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000f3c58 items=0 ppid=2401 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:16.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353363333134383439626632613137303933313266393863643730 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.385000 audit: BPF prog-id=134 op=LOAD Mar 17 18:35:16.385000 audit[3059]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000f3ca8 items=0 ppid=2401 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:16.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353363333134383439626632613137303933313266393863643730 Mar 17 18:35:16.386000 audit: BPF prog-id=134 op=UNLOAD Mar 17 18:35:16.386000 audit: BPF prog-id=133 op=UNLOAD Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { perfmon } for pid=3059 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit[3059]: AVC avc: denied { bpf } for pid=3059 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:16.386000 audit: BPF prog-id=135 op=LOAD Mar 17 18:35:16.386000 audit[3059]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000f3d38 items=0 ppid=2401 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:16.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036353363333134383439626632613137303933313266393863643730 Mar 17 18:35:16.399287 env[1206]: time="2025-03-17T18:35:16.399237446Z" level=info msg="StartContainer for \"0653c314849bf2a1709312f98cd70a37d4e0db2fd5e4335b1b1d1d4822baf02f\" returns successfully" Mar 17 18:35:16.469375 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Mar 17 18:35:16.469510 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Mar 17 18:35:16.997887 systemd[1]: Started sshd@9-10.0.0.17:22-10.0.0.1:53780.service. Mar 17 18:35:16.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.17:22-10.0.0.1:53780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:16.999301 kernel: kauditd_printk_skb: 44 callbacks suppressed Mar 17 18:35:16.999402 kernel: audit: type=1130 audit(1742236516.996:1020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.17:22-10.0.0.1:53780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:17.038000 audit[3120]: USER_ACCT pid=3120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.040403 sshd[3120]: Accepted publickey for core from 10.0.0.1 port 53780 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:17.042711 sshd[3120]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:17.041000 audit[3120]: CRED_ACQ pid=3120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.046436 systemd-logind[1191]: New session 10 of user core. Mar 17 18:35:17.047189 systemd[1]: Started session-10.scope. Mar 17 18:35:17.049127 kernel: audit: type=1101 audit(1742236517.038:1021): pid=3120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.049179 kernel: audit: type=1103 audit(1742236517.041:1022): pid=3120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.049208 kernel: audit: type=1006 audit(1742236517.041:1023): pid=3120 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Mar 17 18:35:17.041000 audit[3120]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6d5edea0 a2=3 a3=0 items=0 ppid=1 pid=3120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.057219 kernel: audit: type=1300 audit(1742236517.041:1023): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6d5edea0 a2=3 a3=0 items=0 ppid=1 pid=3120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.057276 kernel: audit: type=1327 audit(1742236517.041:1023): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:17.041000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:17.050000 audit[3120]: USER_START pid=3120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.064490 kernel: audit: type=1105 audit(1742236517.050:1024): pid=3120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.064537 kernel: audit: type=1103 audit(1742236517.052:1025): pid=3122 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.052000 audit[3122]: CRED_ACQ pid=3122 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.170758 sshd[3120]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:17.170000 audit[3120]: USER_END pid=3120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.173475 systemd[1]: sshd@9-10.0.0.17:22-10.0.0.1:53780.service: Deactivated successfully. Mar 17 18:35:17.174345 systemd[1]: session-10.scope: Deactivated successfully. Mar 17 18:35:17.174956 systemd-logind[1191]: Session 10 logged out. Waiting for processes to exit. Mar 17 18:35:17.175771 systemd-logind[1191]: Removed session 10. Mar 17 18:35:17.170000 audit[3120]: CRED_DISP pid=3120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.180355 kernel: audit: type=1106 audit(1742236517.170:1026): pid=3120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.180416 kernel: audit: type=1104 audit(1742236517.170:1027): pid=3120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:17.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.17:22-10.0.0.1:53780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:17.325322 kubelet[1968]: E0317 18:35:17.325211 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:17.556749 kubelet[1968]: I0317 18:35:17.556670 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-mftp9" podStartSLOduration=2.709093649 podStartE2EDuration="26.556651537s" podCreationTimestamp="2025-03-17 18:34:51 +0000 UTC" firstStartedPulling="2025-03-17 18:34:52.477305823 +0000 UTC m=+20.148969863" lastFinishedPulling="2025-03-17 18:35:16.324863711 +0000 UTC m=+43.996527751" observedRunningTime="2025-03-17 18:35:17.554832856 +0000 UTC m=+45.226496896" watchObservedRunningTime="2025-03-17 18:35:17.556651537 +0000 UTC m=+45.228315577" Mar 17 18:35:17.683000 audit[3198]: AVC avc: denied { write } for pid=3198 comm="tee" name="fd" dev="proc" ino=24472 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:35:17.683000 audit[3198]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffec3848a2c a2=241 a3=1b6 items=1 ppid=3165 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.683000 audit: CWD cwd="/etc/service/enabled/cni/log" Mar 17 18:35:17.683000 audit: PATH item=0 name="/dev/fd/63" inode=25783 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:35:17.683000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:35:17.689000 audit[3216]: AVC avc: denied { write } for pid=3216 comm="tee" name="fd" dev="proc" ino=23405 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:35:17.689000 audit[3216]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff1dbd9a2a a2=241 a3=1b6 items=1 ppid=3170 pid=3216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.689000 audit: CWD cwd="/etc/service/enabled/felix/log" Mar 17 18:35:17.689000 audit: PATH item=0 name="/dev/fd/63" inode=25793 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:35:17.689000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:35:17.705000 audit[3218]: AVC avc: denied { write } for pid=3218 comm="tee" name="fd" dev="proc" ino=24879 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:35:17.705000 audit[3218]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe0c2d3a2a a2=241 a3=1b6 items=1 ppid=3167 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.705000 audit: CWD cwd="/etc/service/enabled/bird6/log" Mar 17 18:35:17.705000 audit: PATH item=0 name="/dev/fd/63" inode=24477 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:35:17.705000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:35:17.713000 audit[3224]: AVC avc: denied { write } for pid=3224 comm="tee" name="fd" dev="proc" ino=25803 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:35:17.713000 audit[3224]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff814ada2a a2=241 a3=1b6 items=1 ppid=3175 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.713000 audit: CWD cwd="/etc/service/enabled/confd/log" Mar 17 18:35:17.713000 audit: PATH item=0 name="/dev/fd/63" inode=25794 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:35:17.713000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:35:17.716000 audit[3236]: AVC avc: denied { write } for pid=3236 comm="tee" name="fd" dev="proc" ino=23411 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:35:17.716000 audit[3236]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcedfb4a1b a2=241 a3=1b6 items=1 ppid=3177 pid=3236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.716000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Mar 17 18:35:17.716000 audit: PATH item=0 name="/dev/fd/63" inode=25797 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:35:17.716000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:35:17.730000 audit[3243]: AVC avc: denied { write } for pid=3243 comm="tee" name="fd" dev="proc" ino=24481 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:35:17.730000 audit[3243]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe5e6dca2b a2=241 a3=1b6 items=1 ppid=3168 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.730000 audit: CWD cwd="/etc/service/enabled/bird/log" Mar 17 18:35:17.730000 audit: PATH item=0 name="/dev/fd/63" inode=25798 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:35:17.730000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:35:17.731000 audit[3245]: AVC avc: denied { write } for pid=3245 comm="tee" name="fd" dev="proc" ino=24485 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:35:17.731000 audit[3245]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff86ab2a1a a2=241 a3=1b6 items=1 ppid=3179 pid=3245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.731000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Mar 17 18:35:17.731000 audit: PATH item=0 name="/dev/fd/63" inode=25805 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:35:17.731000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.811000 audit: BPF prog-id=136 op=LOAD Mar 17 18:35:17.811000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffca6086840 a2=98 a3=3 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.811000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.811000 audit: BPF prog-id=136 op=UNLOAD Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit: BPF prog-id=137 op=LOAD Mar 17 18:35:17.812000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffca6086620 a2=74 a3=540051 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.812000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.812000 audit: BPF prog-id=137 op=UNLOAD Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.812000 audit: BPF prog-id=138 op=LOAD Mar 17 18:35:17.812000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffca6086650 a2=94 a3=2 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.812000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.812000 audit: BPF prog-id=138 op=UNLOAD Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit: BPF prog-id=139 op=LOAD Mar 17 18:35:17.921000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffca6086510 a2=40 a3=1 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.921000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.921000 audit: BPF prog-id=139 op=UNLOAD Mar 17 18:35:17.921000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.921000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffca60865e0 a2=50 a3=7ffca60866c0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.921000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca6086520 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffca6086550 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffca6086460 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca6086570 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca6086550 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca6086540 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca6086570 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffca6086550 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffca6086570 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffca6086540 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca60865b0 a2=28 a3=0 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffca6086360 a2=50 a3=1 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit: BPF prog-id=140 op=LOAD Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffca6086360 a2=94 a3=5 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit: BPF prog-id=140 op=UNLOAD Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffca6086410 a2=50 a3=1 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffca6086530 a2=4 a3=38 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.928000 audit[3282]: AVC avc: denied { confidentiality } for pid=3282 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:35:17.928000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffca6086580 a2=94 a3=6 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.928000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { confidentiality } for pid=3282 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:35:17.929000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffca6085d30 a2=94 a3=83 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.929000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { perfmon } for pid=3282 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { bpf } for pid=3282 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.929000 audit[3282]: AVC avc: denied { confidentiality } for pid=3282 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:35:17.929000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffca6085d30 a2=94 a3=83 items=0 ppid=3174 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.929000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit: BPF prog-id=141 op=LOAD Mar 17 18:35:17.934000 audit[3286]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcdc7b3130 a2=98 a3=1999999999999999 items=0 ppid=3174 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.934000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:35:17.934000 audit: BPF prog-id=141 op=UNLOAD Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.934000 audit: BPF prog-id=142 op=LOAD Mar 17 18:35:17.934000 audit[3286]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcdc7b3010 a2=74 a3=ffff items=0 ppid=3174 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.934000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:35:17.935000 audit: BPF prog-id=142 op=UNLOAD Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.935000 audit: BPF prog-id=143 op=LOAD Mar 17 18:35:17.935000 audit[3286]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcdc7b3050 a2=40 a3=7ffcdc7b3230 items=0 ppid=3174 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.935000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:35:17.935000 audit: BPF prog-id=143 op=UNLOAD Mar 17 18:35:17.970483 systemd-networkd[1028]: vxlan.calico: Link UP Mar 17 18:35:17.970491 systemd-networkd[1028]: vxlan.calico: Gained carrier Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit: BPF prog-id=144 op=LOAD Mar 17 18:35:17.981000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef6d460d0 a2=98 a3=ffffffff items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.981000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.981000 audit: BPF prog-id=144 op=UNLOAD Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.981000 audit: BPF prog-id=145 op=LOAD Mar 17 18:35:17.981000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef6d45ee0 a2=74 a3=540051 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.981000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit: BPF prog-id=145 op=UNLOAD Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit: BPF prog-id=146 op=LOAD Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef6d45f10 a2=94 a3=2 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit: BPF prog-id=146 op=UNLOAD Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffef6d45de0 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef6d45e10 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef6d45d20 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffef6d45e30 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffef6d45e10 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffef6d45e00 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffef6d45e30 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef6d45e10 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef6d45e30 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef6d45e00 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffef6d45e70 a2=28 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit: BPF prog-id=147 op=LOAD Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffef6d45ce0 a2=40 a3=0 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.982000 audit: BPF prog-id=147 op=UNLOAD Mar 17 18:35:17.982000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.982000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffef6d45cd0 a2=50 a3=2800 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.982000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffef6d45cd0 a2=50 a3=2800 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.983000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit: BPF prog-id=148 op=LOAD Mar 17 18:35:17.983000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffef6d454f0 a2=94 a3=2 items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.983000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.983000 audit: BPF prog-id=148 op=UNLOAD Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.983000 audit: BPF prog-id=149 op=LOAD Mar 17 18:35:17.983000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffef6d455f0 a2=94 a3=2d items=0 ppid=3174 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.983000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit: BPF prog-id=150 op=LOAD Mar 17 18:35:17.986000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb185afd0 a2=98 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.986000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:17.986000 audit: BPF prog-id=150 op=UNLOAD Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit: BPF prog-id=151 op=LOAD Mar 17 18:35:17.986000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb185adb0 a2=74 a3=540051 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.986000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:17.986000 audit: BPF prog-id=151 op=UNLOAD Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:17.986000 audit: BPF prog-id=152 op=LOAD Mar 17 18:35:17.986000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb185ade0 a2=94 a3=2 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:17.986000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:17.986000 audit: BPF prog-id=152 op=UNLOAD Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.102000 audit: BPF prog-id=153 op=LOAD Mar 17 18:35:18.102000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb185aca0 a2=40 a3=1 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.102000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.103000 audit: BPF prog-id=153 op=UNLOAD Mar 17 18:35:18.103000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.103000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffeb185ad70 a2=50 a3=7ffeb185ae50 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.103000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb185acb0 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb185ace0 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb185abf0 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb185ad00 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb185ace0 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb185acd0 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb185ad00 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb185ace0 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb185ad00 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb185acd0 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb185ad40 a2=28 a3=0 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeb185aaf0 a2=50 a3=1 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit: BPF prog-id=154 op=LOAD Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffeb185aaf0 a2=94 a3=5 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit: BPF prog-id=154 op=UNLOAD Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeb185aba0 a2=50 a3=1 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffeb185acc0 a2=4 a3=38 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.110000 audit[3318]: AVC avc: denied { confidentiality } for pid=3318 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:35:18.110000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb185ad10 a2=94 a3=6 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.110000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { confidentiality } for pid=3318 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:35:18.111000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb185a4c0 a2=94 a3=83 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.111000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { confidentiality } for pid=3318 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:35:18.111000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb185a4c0 a2=94 a3=83 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.111000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb185bf00 a2=10 a3=208 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.111000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb185bda0 a2=10 a3=3 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.111000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb185bd40 a2=10 a3=3 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.111000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.111000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.111000 audit[3318]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb185bd40 a2=10 a3=7 items=0 ppid=3174 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.111000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:35:18.118000 audit: BPF prog-id=149 op=UNLOAD Mar 17 18:35:18.158000 audit[3346]: NETFILTER_CFG table=mangle:99 family=2 entries=16 op=nft_register_chain pid=3346 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:18.158000 audit[3346]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffdc6d7f540 a2=0 a3=7ffdc6d7f52c items=0 ppid=3174 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.158000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:18.162000 audit[3345]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3345 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:18.162000 audit[3345]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc67293af0 a2=0 a3=7ffc67293adc items=0 ppid=3174 pid=3345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.162000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:18.164000 audit[3349]: NETFILTER_CFG table=filter:101 family=2 entries=39 op=nft_register_chain pid=3349 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:18.164000 audit[3349]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffeb2eba870 a2=0 a3=7ffeb2eba85c items=0 ppid=3174 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.164000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:18.167000 audit[3344]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=3344 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:18.167000 audit[3344]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffdf85a4860 a2=0 a3=7ffdf85a484c items=0 ppid=3174 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.167000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:18.327206 kubelet[1968]: E0317 18:35:18.327113 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:18.421471 env[1206]: time="2025-03-17T18:35:18.421419751Z" level=info msg="StopPodSandbox for \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\"" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.463 [INFO][3391] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.463 [INFO][3391] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" iface="eth0" netns="/var/run/netns/cni-ca87a296-9d1b-6212-3309-4378667ce0b1" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.463 [INFO][3391] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" iface="eth0" netns="/var/run/netns/cni-ca87a296-9d1b-6212-3309-4378667ce0b1" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.464 [INFO][3391] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" iface="eth0" netns="/var/run/netns/cni-ca87a296-9d1b-6212-3309-4378667ce0b1" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.464 [INFO][3391] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.464 [INFO][3391] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.529 [INFO][3399] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.530 [INFO][3399] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.530 [INFO][3399] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.537 [WARNING][3399] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.537 [INFO][3399] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.538 [INFO][3399] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:18.541464 env[1206]: 2025-03-17 18:35:18.539 [INFO][3391] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:18.542027 env[1206]: time="2025-03-17T18:35:18.541604070Z" level=info msg="TearDown network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\" successfully" Mar 17 18:35:18.542027 env[1206]: time="2025-03-17T18:35:18.541642102Z" level=info msg="StopPodSandbox for \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\" returns successfully" Mar 17 18:35:18.542091 kubelet[1968]: E0317 18:35:18.542025 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:18.543529 env[1206]: time="2025-03-17T18:35:18.542822153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gsgnn,Uid:6d87e993-d1bd-413d-a2dd-de47fa642094,Namespace:kube-system,Attempt:1,}" Mar 17 18:35:18.544025 systemd[1]: run-netns-cni\x2dca87a296\x2d9d1b\x2d6212\x2d3309\x2d4378667ce0b1.mount: Deactivated successfully. Mar 17 18:35:18.850719 systemd-networkd[1028]: cali3931ec4ae3b: Link UP Mar 17 18:35:18.852146 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3931ec4ae3b: link becomes ready Mar 17 18:35:18.851957 systemd-networkd[1028]: cali3931ec4ae3b: Gained carrier Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.778 [INFO][3409] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0 coredns-668d6bf9bc- kube-system 6d87e993-d1bd-413d-a2dd-de47fa642094 857 0 2025-03-17 18:34:39 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-gsgnn eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3931ec4ae3b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.778 [INFO][3409] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.811 [INFO][3422] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" HandleID="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.819 [INFO][3422] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" HandleID="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003649d0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-gsgnn", "timestamp":"2025-03-17 18:35:18.811519796 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.819 [INFO][3422] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.819 [INFO][3422] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.820 [INFO][3422] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.822 [INFO][3422] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.826 [INFO][3422] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.830 [INFO][3422] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.832 [INFO][3422] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.834 [INFO][3422] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.834 [INFO][3422] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.836 [INFO][3422] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253 Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.839 [INFO][3422] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.846 [INFO][3422] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.846 [INFO][3422] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" host="localhost" Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.846 [INFO][3422] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:18.863940 env[1206]: 2025-03-17 18:35:18.846 [INFO][3422] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" HandleID="k8s-pod-network.9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.864608 env[1206]: 2025-03-17 18:35:18.849 [INFO][3409] cni-plugin/k8s.go 386: Populated endpoint ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d87e993-d1bd-413d-a2dd-de47fa642094", ResourceVersion:"857", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-gsgnn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3931ec4ae3b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:18.864608 env[1206]: 2025-03-17 18:35:18.849 [INFO][3409] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.129/32] ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.864608 env[1206]: 2025-03-17 18:35:18.849 [INFO][3409] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3931ec4ae3b ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.864608 env[1206]: 2025-03-17 18:35:18.852 [INFO][3409] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.864608 env[1206]: 2025-03-17 18:35:18.852 [INFO][3409] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d87e993-d1bd-413d-a2dd-de47fa642094", ResourceVersion:"857", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253", Pod:"coredns-668d6bf9bc-gsgnn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3931ec4ae3b", MAC:"9e:2d:60:9b:be:1e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:18.864608 env[1206]: 2025-03-17 18:35:18.861 [INFO][3409] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253" Namespace="kube-system" Pod="coredns-668d6bf9bc-gsgnn" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:18.871000 audit[3443]: NETFILTER_CFG table=filter:103 family=2 entries=34 op=nft_register_chain pid=3443 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:18.871000 audit[3443]: SYSCALL arch=c000003e syscall=46 success=yes exit=19148 a0=3 a1=7ffecaee9320 a2=0 a3=7ffecaee930c items=0 ppid=3174 pid=3443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.871000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:18.878118 env[1206]: time="2025-03-17T18:35:18.878037876Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:35:18.878118 env[1206]: time="2025-03-17T18:35:18.878097067Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:35:18.878118 env[1206]: time="2025-03-17T18:35:18.878110943Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:35:18.878450 env[1206]: time="2025-03-17T18:35:18.878360844Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253 pid=3451 runtime=io.containerd.runc.v2 Mar 17 18:35:18.889010 systemd[1]: Started cri-containerd-9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253.scope. Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit: BPF prog-id=155 op=LOAD Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313837353865633633356166353534343538313836386139333036 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313837353865633633356166353534343538313836386139333036 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit: BPF prog-id=156 op=LOAD Mar 17 18:35:18.900000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002c9ce0 items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313837353865633633356166353534343538313836386139333036 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.900000 audit: BPF prog-id=157 op=LOAD Mar 17 18:35:18.900000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0002c9d28 items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313837353865633633356166353534343538313836386139333036 Mar 17 18:35:18.901000 audit: BPF prog-id=157 op=UNLOAD Mar 17 18:35:18.901000 audit: BPF prog-id=156 op=UNLOAD Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.901000 audit: BPF prog-id=158 op=LOAD Mar 17 18:35:18.901000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003cc138 items=0 ppid=3451 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934313837353865633633356166353534343538313836386139333036 Mar 17 18:35:18.903389 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:35:18.925344 env[1206]: time="2025-03-17T18:35:18.925301733Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gsgnn,Uid:6d87e993-d1bd-413d-a2dd-de47fa642094,Namespace:kube-system,Attempt:1,} returns sandbox id \"9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253\"" Mar 17 18:35:18.926166 kubelet[1968]: E0317 18:35:18.926144 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:18.928899 env[1206]: time="2025-03-17T18:35:18.928852116Z" level=info msg="CreateContainer within sandbox \"9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:35:18.949667 env[1206]: time="2025-03-17T18:35:18.949620500Z" level=info msg="CreateContainer within sandbox \"9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"fe6d97ed0169b9ba3ae0c61a222433a17c1a06aa9064c25c9b6e2bc5674b188f\"" Mar 17 18:35:18.950030 env[1206]: time="2025-03-17T18:35:18.950000856Z" level=info msg="StartContainer for \"fe6d97ed0169b9ba3ae0c61a222433a17c1a06aa9064c25c9b6e2bc5674b188f\"" Mar 17 18:35:18.964438 systemd[1]: Started cri-containerd-fe6d97ed0169b9ba3ae0c61a222433a17c1a06aa9064c25c9b6e2bc5674b188f.scope. Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.976000 audit: BPF prog-id=159 op=LOAD Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3451 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366439376564303136396239626133616530633631613232323433 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3451 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366439376564303136396239626133616530633631613232323433 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit: BPF prog-id=160 op=LOAD Mar 17 18:35:18.977000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028d290 items=0 ppid=3451 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366439376564303136396239626133616530633631613232323433 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit: BPF prog-id=161 op=LOAD Mar 17 18:35:18.977000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028d2d8 items=0 ppid=3451 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366439376564303136396239626133616530633631613232323433 Mar 17 18:35:18.977000 audit: BPF prog-id=161 op=UNLOAD Mar 17 18:35:18.977000 audit: BPF prog-id=160 op=UNLOAD Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:18.977000 audit: BPF prog-id=162 op=LOAD Mar 17 18:35:18.977000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00028d6e8 items=0 ppid=3451 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665366439376564303136396239626133616530633631613232323433 Mar 17 18:35:18.990782 env[1206]: time="2025-03-17T18:35:18.990731545Z" level=info msg="StartContainer for \"fe6d97ed0169b9ba3ae0c61a222433a17c1a06aa9064c25c9b6e2bc5674b188f\" returns successfully" Mar 17 18:35:19.024000 audit[3502]: AVC avc: denied { getattr } for pid=3502 comm="coredns" path="cgroup:[4026532636]" dev="nsfs" ino=4026532636 scontext=system_u:system_r:svirt_lxc_net_t:s0:c147,c224 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Mar 17 18:35:19.024000 audit[3502]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005ab10 a2=c00045eed8 a3=0 items=0 ppid=3451 pid=3502 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c147,c224 key=(null) Mar 17 18:35:19.024000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Mar 17 18:35:19.331529 kubelet[1968]: E0317 18:35:19.331494 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:19.421071 env[1206]: time="2025-03-17T18:35:19.421004438Z" level=info msg="StopPodSandbox for \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\"" Mar 17 18:35:19.421432 env[1206]: time="2025-03-17T18:35:19.421014767Z" level=info msg="StopPodSandbox for \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\"" Mar 17 18:35:19.434531 kubelet[1968]: I0317 18:35:19.434461 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-gsgnn" podStartSLOduration=40.434440805 podStartE2EDuration="40.434440805s" podCreationTimestamp="2025-03-17 18:34:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:35:19.434176254 +0000 UTC m=+47.105840294" watchObservedRunningTime="2025-03-17 18:35:19.434440805 +0000 UTC m=+47.106104845" Mar 17 18:35:19.468000 audit[3571]: NETFILTER_CFG table=filter:104 family=2 entries=16 op=nft_register_rule pid=3571 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:19.468000 audit[3571]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdde2fb250 a2=0 a3=7ffdde2fb23c items=0 ppid=2118 pid=3571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:19.468000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:19.475000 audit[3571]: NETFILTER_CFG table=nat:105 family=2 entries=14 op=nft_register_rule pid=3571 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:19.475000 audit[3571]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffdde2fb250 a2=0 a3=0 items=0 ppid=2118 pid=3571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:19.475000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:19.497000 audit[3579]: NETFILTER_CFG table=filter:106 family=2 entries=13 op=nft_register_rule pid=3579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:19.497000 audit[3579]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeb0374990 a2=0 a3=7ffeb037497c items=0 ppid=2118 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:19.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:19.502000 audit[3579]: NETFILTER_CFG table=nat:107 family=2 entries=35 op=nft_register_chain pid=3579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:19.502000 audit[3579]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffeb0374990 a2=0 a3=7ffeb037497c items=0 ppid=2118 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:19.502000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.478 [INFO][3557] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.479 [INFO][3557] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" iface="eth0" netns="/var/run/netns/cni-f8451fbc-9e29-4dfb-2f91-7691dfb99584" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.480 [INFO][3557] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" iface="eth0" netns="/var/run/netns/cni-f8451fbc-9e29-4dfb-2f91-7691dfb99584" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.485 [INFO][3557] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" iface="eth0" netns="/var/run/netns/cni-f8451fbc-9e29-4dfb-2f91-7691dfb99584" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.485 [INFO][3557] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.485 [INFO][3557] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.513 [INFO][3573] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.514 [INFO][3573] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.514 [INFO][3573] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.520 [WARNING][3573] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.520 [INFO][3573] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.522 [INFO][3573] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:19.526238 env[1206]: 2025-03-17 18:35:19.523 [INFO][3557] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:19.526238 env[1206]: time="2025-03-17T18:35:19.525310316Z" level=info msg="TearDown network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\" successfully" Mar 17 18:35:19.526238 env[1206]: time="2025-03-17T18:35:19.525351866Z" level=info msg="StopPodSandbox for \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\" returns successfully" Mar 17 18:35:19.527447 env[1206]: time="2025-03-17T18:35:19.526513632Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-l589x,Uid:6279e997-1d7d-4066-828e-e7a79ace4c93,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:35:19.527364 systemd[1]: run-netns-cni\x2df8451fbc\x2d9e29\x2d4dfb\x2d2f91\x2d7691dfb99584.mount: Deactivated successfully. Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.496 [INFO][3556] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.496 [INFO][3556] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" iface="eth0" netns="/var/run/netns/cni-412b810e-ac5f-99f7-2024-f3afdc6aeb1f" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.496 [INFO][3556] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" iface="eth0" netns="/var/run/netns/cni-412b810e-ac5f-99f7-2024-f3afdc6aeb1f" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.497 [INFO][3556] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" iface="eth0" netns="/var/run/netns/cni-412b810e-ac5f-99f7-2024-f3afdc6aeb1f" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.497 [INFO][3556] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.497 [INFO][3556] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.522 [INFO][3580] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.523 [INFO][3580] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.523 [INFO][3580] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.577 [WARNING][3580] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.577 [INFO][3580] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.580 [INFO][3580] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:19.586406 env[1206]: 2025-03-17 18:35:19.583 [INFO][3556] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:19.587626 env[1206]: time="2025-03-17T18:35:19.587571768Z" level=info msg="TearDown network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\" successfully" Mar 17 18:35:19.587626 env[1206]: time="2025-03-17T18:35:19.587611324Z" level=info msg="StopPodSandbox for \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\" returns successfully" Mar 17 18:35:19.588284 env[1206]: time="2025-03-17T18:35:19.588257835Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cdbb544d5-c6ssd,Uid:770c5f5a-046e-47e9-8ac7-76a9008768a6,Namespace:calico-system,Attempt:1,}" Mar 17 18:35:19.589721 systemd[1]: run-netns-cni\x2d412b810e\x2dac5f\x2d99f7\x2d2024\x2df3afdc6aeb1f.mount: Deactivated successfully. Mar 17 18:35:19.789351 systemd-networkd[1028]: vxlan.calico: Gained IPv6LL Mar 17 18:35:19.959354 systemd-networkd[1028]: cali5cce3e045da: Link UP Mar 17 18:35:19.960853 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:35:19.961042 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5cce3e045da: link becomes ready Mar 17 18:35:19.962022 systemd-networkd[1028]: cali5cce3e045da: Gained carrier Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.779 [INFO][3604] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0 calico-kube-controllers-cdbb544d5- calico-system 770c5f5a-046e-47e9-8ac7-76a9008768a6 878 0 2025-03-17 18:34:51 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:cdbb544d5 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-cdbb544d5-c6ssd eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali5cce3e045da [] []}} ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.779 [INFO][3604] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.819 [INFO][3619] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" HandleID="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.832 [INFO][3619] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" HandleID="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00062a620), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-cdbb544d5-c6ssd", "timestamp":"2025-03-17 18:35:19.819560369 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.832 [INFO][3619] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.832 [INFO][3619] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.832 [INFO][3619] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.835 [INFO][3619] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.931 [INFO][3619] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.938 [INFO][3619] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.940 [INFO][3619] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.943 [INFO][3619] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.943 [INFO][3619] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.944 [INFO][3619] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8 Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.948 [INFO][3619] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.954 [INFO][3619] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.954 [INFO][3619] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" host="localhost" Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.954 [INFO][3619] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:20.008440 env[1206]: 2025-03-17 18:35:19.954 [INFO][3619] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" HandleID="k8s-pod-network.010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:20.009337 env[1206]: 2025-03-17 18:35:19.957 [INFO][3604] cni-plugin/k8s.go 386: Populated endpoint ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0", GenerateName:"calico-kube-controllers-cdbb544d5-", Namespace:"calico-system", SelfLink:"", UID:"770c5f5a-046e-47e9-8ac7-76a9008768a6", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cdbb544d5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-cdbb544d5-c6ssd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5cce3e045da", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:20.009337 env[1206]: 2025-03-17 18:35:19.957 [INFO][3604] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.130/32] ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:20.009337 env[1206]: 2025-03-17 18:35:19.957 [INFO][3604] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5cce3e045da ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:20.009337 env[1206]: 2025-03-17 18:35:19.962 [INFO][3604] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:20.009337 env[1206]: 2025-03-17 18:35:19.963 [INFO][3604] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0", GenerateName:"calico-kube-controllers-cdbb544d5-", Namespace:"calico-system", SelfLink:"", UID:"770c5f5a-046e-47e9-8ac7-76a9008768a6", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cdbb544d5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8", Pod:"calico-kube-controllers-cdbb544d5-c6ssd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5cce3e045da", MAC:"6a:15:25:0c:a2:9c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:20.009337 env[1206]: 2025-03-17 18:35:20.006 [INFO][3604] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8" Namespace="calico-system" Pod="calico-kube-controllers-cdbb544d5-c6ssd" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:20.016000 audit[3647]: NETFILTER_CFG table=filter:108 family=2 entries=38 op=nft_register_chain pid=3647 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:20.016000 audit[3647]: SYSCALL arch=c000003e syscall=46 success=yes exit=20336 a0=3 a1=7ffe455d43e0 a2=0 a3=7ffe455d43cc items=0 ppid=3174 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.016000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:20.054644 env[1206]: time="2025-03-17T18:35:20.054566628Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:35:20.054845 env[1206]: time="2025-03-17T18:35:20.054645150Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:35:20.054845 env[1206]: time="2025-03-17T18:35:20.054658045Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:35:20.054952 env[1206]: time="2025-03-17T18:35:20.054821781Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8 pid=3655 runtime=io.containerd.runc.v2 Mar 17 18:35:20.069034 systemd[1]: Started cri-containerd-010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8.scope. Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.080000 audit: BPF prog-id=163 op=LOAD Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031306234663966343136316131386235646330373931383663326539 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031306234663966343136316131386235646330373931383663326539 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit: BPF prog-id=164 op=LOAD Mar 17 18:35:20.081000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00021f0b0 items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031306234663966343136316131386235646330373931383663326539 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit: BPF prog-id=165 op=LOAD Mar 17 18:35:20.081000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00021f0f8 items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031306234663966343136316131386235646330373931383663326539 Mar 17 18:35:20.081000 audit: BPF prog-id=165 op=UNLOAD Mar 17 18:35:20.081000 audit: BPF prog-id=164 op=UNLOAD Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.081000 audit: BPF prog-id=166 op=LOAD Mar 17 18:35:20.081000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00021f508 items=0 ppid=3655 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031306234663966343136316131386235646330373931383663326539 Mar 17 18:35:20.083515 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:35:20.106676 env[1206]: time="2025-03-17T18:35:20.106631853Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-cdbb544d5-c6ssd,Uid:770c5f5a-046e-47e9-8ac7-76a9008768a6,Namespace:calico-system,Attempt:1,} returns sandbox id \"010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8\"" Mar 17 18:35:20.108211 env[1206]: time="2025-03-17T18:35:20.108182929Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\"" Mar 17 18:35:20.178483 systemd-networkd[1028]: cali1e11dd554c4: Link UP Mar 17 18:35:20.180100 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1e11dd554c4: link becomes ready Mar 17 18:35:20.180511 systemd-networkd[1028]: cali1e11dd554c4: Gained carrier Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.771 [INFO][3591] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0 calico-apiserver-64c69bdd46- calico-apiserver 6279e997-1d7d-4066-828e-e7a79ace4c93 873 0 2025-03-17 18:34:51 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64c69bdd46 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-64c69bdd46-l589x eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1e11dd554c4 [] []}} ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.772 [INFO][3591] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.825 [INFO][3618] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" HandleID="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.931 [INFO][3618] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" HandleID="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000366850), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-64c69bdd46-l589x", "timestamp":"2025-03-17 18:35:19.825664741 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.931 [INFO][3618] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.954 [INFO][3618] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.954 [INFO][3618] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:19.960 [INFO][3618] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.051 [INFO][3618] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.056 [INFO][3618] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.058 [INFO][3618] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.061 [INFO][3618] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.061 [INFO][3618] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.062 [INFO][3618] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4 Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.135 [INFO][3618] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.174 [INFO][3618] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.174 [INFO][3618] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" host="localhost" Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.174 [INFO][3618] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:20.192781 env[1206]: 2025-03-17 18:35:20.174 [INFO][3618] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" HandleID="k8s-pod-network.130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:20.193582 env[1206]: 2025-03-17 18:35:20.176 [INFO][3591] cni-plugin/k8s.go 386: Populated endpoint ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"6279e997-1d7d-4066-828e-e7a79ace4c93", ResourceVersion:"873", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-64c69bdd46-l589x", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e11dd554c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:20.193582 env[1206]: 2025-03-17 18:35:20.177 [INFO][3591] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.131/32] ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:20.193582 env[1206]: 2025-03-17 18:35:20.177 [INFO][3591] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1e11dd554c4 ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:20.193582 env[1206]: 2025-03-17 18:35:20.180 [INFO][3591] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:20.193582 env[1206]: 2025-03-17 18:35:20.181 [INFO][3591] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"6279e997-1d7d-4066-828e-e7a79ace4c93", ResourceVersion:"873", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4", Pod:"calico-apiserver-64c69bdd46-l589x", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e11dd554c4", MAC:"96:06:9b:72:53:96", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:20.193582 env[1206]: 2025-03-17 18:35:20.191 [INFO][3591] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-l589x" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:20.201000 audit[3702]: NETFILTER_CFG table=filter:109 family=2 entries=48 op=nft_register_chain pid=3702 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:20.201000 audit[3702]: SYSCALL arch=c000003e syscall=46 success=yes exit=25868 a0=3 a1=7ffdce9ab190 a2=0 a3=7ffdce9ab17c items=0 ppid=3174 pid=3702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.201000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:20.209183 env[1206]: time="2025-03-17T18:35:20.209099452Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:35:20.209183 env[1206]: time="2025-03-17T18:35:20.209133647Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:35:20.209183 env[1206]: time="2025-03-17T18:35:20.209143687Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:35:20.209434 env[1206]: time="2025-03-17T18:35:20.209355396Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4 pid=3710 runtime=io.containerd.runc.v2 Mar 17 18:35:20.220868 systemd[1]: Started cri-containerd-130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4.scope. Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit: BPF prog-id=167 op=LOAD Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3710 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133306665313863356638383033636162343934393138343062656465 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3710 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133306665313863356638383033636162343934393138343062656465 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.233000 audit: BPF prog-id=168 op=LOAD Mar 17 18:35:20.233000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003485d0 items=0 ppid=3710 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133306665313863356638383033636162343934393138343062656465 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit: BPF prog-id=169 op=LOAD Mar 17 18:35:20.234000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000348618 items=0 ppid=3710 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133306665313863356638383033636162343934393138343062656465 Mar 17 18:35:20.234000 audit: BPF prog-id=169 op=UNLOAD Mar 17 18:35:20.234000 audit: BPF prog-id=168 op=UNLOAD Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit[3720]: AVC avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:20.234000 audit: BPF prog-id=170 op=LOAD Mar 17 18:35:20.234000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000348a28 items=0 ppid=3710 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:20.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133306665313863356638383033636162343934393138343062656465 Mar 17 18:35:20.235941 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:35:20.237343 systemd-networkd[1028]: cali3931ec4ae3b: Gained IPv6LL Mar 17 18:35:20.257966 env[1206]: time="2025-03-17T18:35:20.257894990Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-l589x,Uid:6279e997-1d7d-4066-828e-e7a79ace4c93,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4\"" Mar 17 18:35:20.336573 kubelet[1968]: E0317 18:35:20.336537 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:21.197416 systemd-networkd[1028]: cali5cce3e045da: Gained IPv6LL Mar 17 18:35:21.340491 kubelet[1968]: E0317 18:35:21.339107 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:21.421323 env[1206]: time="2025-03-17T18:35:21.421269557Z" level=info msg="StopPodSandbox for \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\"" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.556 [INFO][3759] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.556 [INFO][3759] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" iface="eth0" netns="/var/run/netns/cni-cf2edb40-b802-cfad-d96d-42f8a88982e4" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.556 [INFO][3759] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" iface="eth0" netns="/var/run/netns/cni-cf2edb40-b802-cfad-d96d-42f8a88982e4" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.556 [INFO][3759] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" iface="eth0" netns="/var/run/netns/cni-cf2edb40-b802-cfad-d96d-42f8a88982e4" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.556 [INFO][3759] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.557 [INFO][3759] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.586 [INFO][3766] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.586 [INFO][3766] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.586 [INFO][3766] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.593 [WARNING][3766] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.593 [INFO][3766] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.594 [INFO][3766] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:21.597960 env[1206]: 2025-03-17 18:35:21.596 [INFO][3759] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:21.601664 env[1206]: time="2025-03-17T18:35:21.598093793Z" level=info msg="TearDown network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\" successfully" Mar 17 18:35:21.601664 env[1206]: time="2025-03-17T18:35:21.598135613Z" level=info msg="StopPodSandbox for \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\" returns successfully" Mar 17 18:35:21.601664 env[1206]: time="2025-03-17T18:35:21.599547128Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4wbdt,Uid:c88f573a-e921-402f-948e-f2b285a2928f,Namespace:calico-system,Attempt:1,}" Mar 17 18:35:21.600707 systemd[1]: run-netns-cni\x2dcf2edb40\x2db802\x2dcfad\x2dd96d\x2d42f8a88982e4.mount: Deactivated successfully. Mar 17 18:35:21.862845 systemd-networkd[1028]: cali9288df595b7: Link UP Mar 17 18:35:21.865631 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:35:21.865752 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9288df595b7: link becomes ready Mar 17 18:35:21.865895 systemd-networkd[1028]: cali9288df595b7: Gained carrier Mar 17 18:35:21.901281 systemd-networkd[1028]: cali1e11dd554c4: Gained IPv6LL Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.698 [INFO][3775] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--4wbdt-eth0 csi-node-driver- calico-system c88f573a-e921-402f-948e-f2b285a2928f 904 0 2025-03-17 18:34:51 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:84cddb44f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-4wbdt eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali9288df595b7 [] []}} ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.699 [INFO][3775] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.730 [INFO][3787] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" HandleID="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.739 [INFO][3787] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" HandleID="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003e0350), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-4wbdt", "timestamp":"2025-03-17 18:35:21.730016131 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.740 [INFO][3787] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.740 [INFO][3787] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.740 [INFO][3787] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.742 [INFO][3787] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.746 [INFO][3787] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.751 [INFO][3787] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.754 [INFO][3787] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.756 [INFO][3787] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.756 [INFO][3787] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.758 [INFO][3787] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58 Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.807 [INFO][3787] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.858 [INFO][3787] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.858 [INFO][3787] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" host="localhost" Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.858 [INFO][3787] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:21.984688 env[1206]: 2025-03-17 18:35:21.858 [INFO][3787] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" HandleID="k8s-pod-network.20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.985798 env[1206]: 2025-03-17 18:35:21.860 [INFO][3775] cni-plugin/k8s.go 386: Populated endpoint ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--4wbdt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c88f573a-e921-402f-948e-f2b285a2928f", ResourceVersion:"904", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-4wbdt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9288df595b7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:21.985798 env[1206]: 2025-03-17 18:35:21.860 [INFO][3775] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.132/32] ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.985798 env[1206]: 2025-03-17 18:35:21.860 [INFO][3775] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9288df595b7 ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.985798 env[1206]: 2025-03-17 18:35:21.865 [INFO][3775] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.985798 env[1206]: 2025-03-17 18:35:21.866 [INFO][3775] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--4wbdt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c88f573a-e921-402f-948e-f2b285a2928f", ResourceVersion:"904", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58", Pod:"csi-node-driver-4wbdt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9288df595b7", MAC:"16:d6:3f:5d:05:99", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:21.985798 env[1206]: 2025-03-17 18:35:21.982 [INFO][3775] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58" Namespace="calico-system" Pod="csi-node-driver-4wbdt" WorkloadEndpoint="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:21.992000 audit[3810]: NETFILTER_CFG table=filter:110 family=2 entries=42 op=nft_register_chain pid=3810 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:21.992000 audit[3810]: SYSCALL arch=c000003e syscall=46 success=yes exit=21016 a0=3 a1=7ffd75028e20 a2=0 a3=7ffd75028e0c items=0 ppid=3174 pid=3810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:21.992000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:22.089217 env[1206]: time="2025-03-17T18:35:22.089143776Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:35:22.089217 env[1206]: time="2025-03-17T18:35:22.089187009Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:35:22.089483 env[1206]: time="2025-03-17T18:35:22.089198201Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:35:22.089677 env[1206]: time="2025-03-17T18:35:22.089614503Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58 pid=3818 runtime=io.containerd.runc.v2 Mar 17 18:35:22.111114 systemd[1]: Started cri-containerd-20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58.scope. Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.124099 kernel: kauditd_printk_skb: 771 callbacks suppressed Mar 17 18:35:22.124164 kernel: audit: type=1400 audit(1742236522.121:1212): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.130259 kernel: audit: type=1400 audit(1742236522.121:1213): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.130332 kernel: audit: type=1400 audit(1742236522.121:1214): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.133577 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:35:22.136556 kernel: audit: type=1400 audit(1742236522.121:1215): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.139661 kernel: audit: type=1400 audit(1742236522.121:1216): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.139722 kernel: audit: type=1400 audit(1742236522.121:1217): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.145910 kernel: audit: type=1400 audit(1742236522.121:1218): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.146028 kernel: audit: type=1400 audit(1742236522.121:1219): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.152018 kernel: audit: type=1400 audit(1742236522.121:1220): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit: BPF prog-id=171 op=LOAD Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363632303333613739333335366464363939646365653239383530 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363632303333613739333335366464363939646365653239383530 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.123000 audit: BPF prog-id=172 op=LOAD Mar 17 18:35:22.123000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ae670 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363632303333613739333335366464363939646365653239383530 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.156101 kernel: audit: type=1400 audit(1742236522.123:1221): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit: BPF prog-id=173 op=LOAD Mar 17 18:35:22.126000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ae6b8 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363632303333613739333335366464363939646365653239383530 Mar 17 18:35:22.126000 audit: BPF prog-id=173 op=UNLOAD Mar 17 18:35:22.126000 audit: BPF prog-id=172 op=UNLOAD Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.126000 audit: BPF prog-id=174 op=LOAD Mar 17 18:35:22.126000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003aeac8 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230363632303333613739333335366464363939646365653239383530 Mar 17 18:35:22.157645 env[1206]: time="2025-03-17T18:35:22.157610422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-4wbdt,Uid:c88f573a-e921-402f-948e-f2b285a2928f,Namespace:calico-system,Attempt:1,} returns sandbox id \"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58\"" Mar 17 18:35:22.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.17:22-10.0.0.1:53796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:22.175718 systemd[1]: Started sshd@10-10.0.0.17:22-10.0.0.1:53796.service. Mar 17 18:35:22.221000 audit[3853]: USER_ACCT pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.222979 sshd[3853]: Accepted publickey for core from 10.0.0.1 port 53796 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:22.222000 audit[3853]: CRED_ACQ pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.222000 audit[3853]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa769b780 a2=3 a3=0 items=0 ppid=1 pid=3853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.222000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:22.224076 sshd[3853]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:22.227702 systemd-logind[1191]: New session 11 of user core. Mar 17 18:35:22.228510 systemd[1]: Started session-11.scope. Mar 17 18:35:22.230000 audit[3853]: USER_START pid=3853 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.232000 audit[3855]: CRED_ACQ pid=3855 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.349518 sshd[3853]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:22.349000 audit[3853]: USER_END pid=3853 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.349000 audit[3853]: CRED_DISP pid=3853 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.352946 systemd[1]: sshd@10-10.0.0.17:22-10.0.0.1:53796.service: Deactivated successfully. Mar 17 18:35:22.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.17:22-10.0.0.1:53796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:22.353635 systemd[1]: session-11.scope: Deactivated successfully. Mar 17 18:35:22.354237 systemd-logind[1191]: Session 11 logged out. Waiting for processes to exit. Mar 17 18:35:22.355568 systemd[1]: Started sshd@11-10.0.0.17:22-10.0.0.1:53810.service. Mar 17 18:35:22.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.17:22-10.0.0.1:53810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:22.356830 systemd-logind[1191]: Removed session 11. Mar 17 18:35:22.394000 audit[3867]: USER_ACCT pid=3867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.395892 sshd[3867]: Accepted publickey for core from 10.0.0.1 port 53810 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:22.395000 audit[3867]: CRED_ACQ pid=3867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.395000 audit[3867]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec95b5da0 a2=3 a3=0 items=0 ppid=1 pid=3867 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.395000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:22.397382 sshd[3867]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:22.401669 systemd-logind[1191]: New session 12 of user core. Mar 17 18:35:22.402663 systemd[1]: Started session-12.scope. Mar 17 18:35:22.407000 audit[3867]: USER_START pid=3867 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.408000 audit[3869]: CRED_ACQ pid=3869 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.421436 env[1206]: time="2025-03-17T18:35:22.421340107Z" level=info msg="StopPodSandbox for \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\"" Mar 17 18:35:22.422171 env[1206]: time="2025-03-17T18:35:22.422118829Z" level=info msg="StopPodSandbox for \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\"" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.480 [INFO][3900] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.481 [INFO][3900] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" iface="eth0" netns="/var/run/netns/cni-26cd0c7f-fdbc-ce09-96be-242bedd0bc8f" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.481 [INFO][3900] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" iface="eth0" netns="/var/run/netns/cni-26cd0c7f-fdbc-ce09-96be-242bedd0bc8f" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.481 [INFO][3900] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" iface="eth0" netns="/var/run/netns/cni-26cd0c7f-fdbc-ce09-96be-242bedd0bc8f" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.481 [INFO][3900] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.481 [INFO][3900] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.535 [INFO][3925] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.535 [INFO][3925] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.535 [INFO][3925] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.541 [WARNING][3925] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.541 [INFO][3925] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.543 [INFO][3925] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:22.549032 env[1206]: 2025-03-17 18:35:22.544 [INFO][3900] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:22.550224 env[1206]: time="2025-03-17T18:35:22.550156315Z" level=info msg="TearDown network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\" successfully" Mar 17 18:35:22.550357 env[1206]: time="2025-03-17T18:35:22.550317115Z" level=info msg="StopPodSandbox for \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\" returns successfully" Mar 17 18:35:22.551307 kubelet[1968]: E0317 18:35:22.551278 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:22.552631 env[1206]: time="2025-03-17T18:35:22.551778563Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qr5wz,Uid:3be65f5b-e61a-41bc-a43e-418e2fed97d7,Namespace:kube-system,Attempt:1,}" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.495 [INFO][3905] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.495 [INFO][3905] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" iface="eth0" netns="/var/run/netns/cni-06d2bf62-6642-0633-73e3-12a661cbb03c" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.496 [INFO][3905] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" iface="eth0" netns="/var/run/netns/cni-06d2bf62-6642-0633-73e3-12a661cbb03c" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.496 [INFO][3905] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" iface="eth0" netns="/var/run/netns/cni-06d2bf62-6642-0633-73e3-12a661cbb03c" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.496 [INFO][3905] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.496 [INFO][3905] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.546 [INFO][3931] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.547 [INFO][3931] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.547 [INFO][3931] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.555 [WARNING][3931] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.556 [INFO][3931] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.559 [INFO][3931] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:22.565441 env[1206]: 2025-03-17 18:35:22.563 [INFO][3905] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:22.565887 env[1206]: time="2025-03-17T18:35:22.565566646Z" level=info msg="TearDown network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\" successfully" Mar 17 18:35:22.565887 env[1206]: time="2025-03-17T18:35:22.565612274Z" level=info msg="StopPodSandbox for \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\" returns successfully" Mar 17 18:35:22.567138 env[1206]: time="2025-03-17T18:35:22.566653923Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-t7wzj,Uid:c49dcab5-cce7-4080-8ab4-373d768fcabd,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:35:22.603741 systemd[1]: run-containerd-runc-k8s.io-20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58-runc.Om5Tcx.mount: Deactivated successfully. Mar 17 18:35:22.603856 systemd[1]: run-netns-cni\x2d26cd0c7f\x2dfdbc\x2dce09\x2d96be\x2d242bedd0bc8f.mount: Deactivated successfully. Mar 17 18:35:22.603923 systemd[1]: run-netns-cni\x2d06d2bf62\x2d6642\x2d0633\x2d73e3\x2d12a661cbb03c.mount: Deactivated successfully. Mar 17 18:35:22.626520 sshd[3867]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:22.627000 audit[3867]: USER_END pid=3867 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.627000 audit[3867]: CRED_DISP pid=3867 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.17:22-10.0.0.1:53816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:22.631319 systemd[1]: Started sshd@12-10.0.0.17:22-10.0.0.1:53816.service. Mar 17 18:35:22.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.17:22-10.0.0.1:53810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:22.632032 systemd[1]: sshd@11-10.0.0.17:22-10.0.0.1:53810.service: Deactivated successfully. Mar 17 18:35:22.636906 systemd[1]: session-12.scope: Deactivated successfully. Mar 17 18:35:22.641738 systemd-logind[1191]: Session 12 logged out. Waiting for processes to exit. Mar 17 18:35:22.645494 systemd-logind[1191]: Removed session 12. Mar 17 18:35:22.679000 audit[3971]: USER_ACCT pid=3971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.681406 sshd[3971]: Accepted publickey for core from 10.0.0.1 port 53816 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:22.681000 audit[3971]: CRED_ACQ pid=3971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.681000 audit[3971]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfc905960 a2=3 a3=0 items=0 ppid=1 pid=3971 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.681000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:22.683552 sshd[3971]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:22.690278 systemd[1]: Started session-13.scope. Mar 17 18:35:22.691479 systemd-logind[1191]: New session 13 of user core. Mar 17 18:35:22.698000 audit[3971]: USER_START pid=3971 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.701000 audit[3989]: CRED_ACQ pid=3989 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.775949 systemd-networkd[1028]: cali6a28a2d0da7: Link UP Mar 17 18:35:22.779690 systemd-networkd[1028]: cali6a28a2d0da7: Gained carrier Mar 17 18:35:22.780411 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6a28a2d0da7: link becomes ready Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.670 [INFO][3953] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0 calico-apiserver-64c69bdd46- calico-apiserver c49dcab5-cce7-4080-8ab4-373d768fcabd 917 0 2025-03-17 18:34:51 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64c69bdd46 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-64c69bdd46-t7wzj eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali6a28a2d0da7 [] []}} ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.670 [INFO][3953] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.711 [INFO][3977] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" HandleID="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.723 [INFO][3977] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" HandleID="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00027e5d0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-64c69bdd46-t7wzj", "timestamp":"2025-03-17 18:35:22.711775087 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.723 [INFO][3977] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.723 [INFO][3977] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.723 [INFO][3977] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.725 [INFO][3977] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.731 [INFO][3977] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.736 [INFO][3977] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.738 [INFO][3977] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.740 [INFO][3977] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.740 [INFO][3977] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.741 [INFO][3977] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.744 [INFO][3977] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.753 [INFO][3977] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.753 [INFO][3977] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" host="localhost" Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.754 [INFO][3977] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:22.806193 env[1206]: 2025-03-17 18:35:22.754 [INFO][3977] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" HandleID="k8s-pod-network.612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.806786 env[1206]: 2025-03-17 18:35:22.756 [INFO][3953] cni-plugin/k8s.go 386: Populated endpoint ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"c49dcab5-cce7-4080-8ab4-373d768fcabd", ResourceVersion:"917", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-64c69bdd46-t7wzj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6a28a2d0da7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:22.806786 env[1206]: 2025-03-17 18:35:22.756 [INFO][3953] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.133/32] ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.806786 env[1206]: 2025-03-17 18:35:22.756 [INFO][3953] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6a28a2d0da7 ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.806786 env[1206]: 2025-03-17 18:35:22.781 [INFO][3953] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.806786 env[1206]: 2025-03-17 18:35:22.781 [INFO][3953] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"c49dcab5-cce7-4080-8ab4-373d768fcabd", ResourceVersion:"917", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b", Pod:"calico-apiserver-64c69bdd46-t7wzj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6a28a2d0da7", MAC:"9e:2f:8a:1b:14:8e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:22.806786 env[1206]: 2025-03-17 18:35:22.794 [INFO][3953] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b" Namespace="calico-apiserver" Pod="calico-apiserver-64c69bdd46-t7wzj" WorkloadEndpoint="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:22.817000 audit[4009]: NETFILTER_CFG table=filter:111 family=2 entries=46 op=nft_register_chain pid=4009 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:22.817000 audit[4009]: SYSCALL arch=c000003e syscall=46 success=yes exit=23892 a0=3 a1=7ffd0fa18d90 a2=0 a3=7ffd0fa18d7c items=0 ppid=3174 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.817000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:22.832206 env[1206]: time="2025-03-17T18:35:22.831689195Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:35:22.832206 env[1206]: time="2025-03-17T18:35:22.831779089Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:35:22.832206 env[1206]: time="2025-03-17T18:35:22.831792756Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:35:22.832206 env[1206]: time="2025-03-17T18:35:22.832050603Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b pid=4022 runtime=io.containerd.runc.v2 Mar 17 18:35:22.869394 systemd[1]: run-containerd-runc-k8s.io-612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b-runc.NU9j11.mount: Deactivated successfully. Mar 17 18:35:22.871602 systemd[1]: Started cri-containerd-612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b.scope. Mar 17 18:35:22.873622 systemd-networkd[1028]: cali42e0fcb8e59: Link UP Mar 17 18:35:22.876771 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:35:22.876847 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali42e0fcb8e59: link becomes ready Mar 17 18:35:22.876906 systemd-networkd[1028]: cali42e0fcb8e59: Gained carrier Mar 17 18:35:22.888730 sshd[3971]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:22.890000 audit[3971]: USER_END pid=3971 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.890000 audit[3971]: CRED_DISP pid=3971 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.656 [INFO][3941] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0 coredns-668d6bf9bc- kube-system 3be65f5b-e61a-41bc-a43e-418e2fed97d7 916 0 2025-03-17 18:34:39 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-qr5wz eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali42e0fcb8e59 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.656 [INFO][3941] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.715 [INFO][3976] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" HandleID="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.723 [INFO][3976] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" HandleID="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000610ef0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-qr5wz", "timestamp":"2025-03-17 18:35:22.715178841 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.723 [INFO][3976] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.754 [INFO][3976] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.754 [INFO][3976] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.826 [INFO][3976] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.832 [INFO][3976] ipam/ipam.go 372: Looking up existing affinities for host host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.839 [INFO][3976] ipam/ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.841 [INFO][3976] ipam/ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.846 [INFO][3976] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.847 [INFO][3976] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.850 [INFO][3976] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.855 [INFO][3976] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.865 [INFO][3976] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.865 [INFO][3976] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" host="localhost" Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.865 [INFO][3976] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:22.893466 env[1206]: 2025-03-17 18:35:22.865 [INFO][3976] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" HandleID="k8s-pod-network.b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.894309 env[1206]: 2025-03-17 18:35:22.870 [INFO][3941] cni-plugin/k8s.go 386: Populated endpoint ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3be65f5b-e61a-41bc-a43e-418e2fed97d7", ResourceVersion:"916", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-qr5wz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali42e0fcb8e59", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:22.894309 env[1206]: 2025-03-17 18:35:22.870 [INFO][3941] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.88.134/32] ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.894309 env[1206]: 2025-03-17 18:35:22.870 [INFO][3941] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali42e0fcb8e59 ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.894309 env[1206]: 2025-03-17 18:35:22.878 [INFO][3941] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.894309 env[1206]: 2025-03-17 18:35:22.878 [INFO][3941] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3be65f5b-e61a-41bc-a43e-418e2fed97d7", ResourceVersion:"916", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e", Pod:"coredns-668d6bf9bc-qr5wz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali42e0fcb8e59", MAC:"86:e5:da:f4:5e:76", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:22.894309 env[1206]: 2025-03-17 18:35:22.891 [INFO][3941] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e" Namespace="kube-system" Pod="coredns-668d6bf9bc-qr5wz" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:22.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.17:22-10.0.0.1:53816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:22.893573 systemd[1]: sshd@12-10.0.0.17:22-10.0.0.1:53816.service: Deactivated successfully. Mar 17 18:35:22.894261 systemd[1]: session-13.scope: Deactivated successfully. Mar 17 18:35:22.894904 systemd-logind[1191]: Session 13 logged out. Waiting for processes to exit. Mar 17 18:35:22.896030 systemd-logind[1191]: Removed session 13. Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit: BPF prog-id=175 op=LOAD Mar 17 18:35:22.909000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[4031]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4022 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323535356266333063616235376537306366316363623437636232 Mar 17 18:35:22.909000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.909000 audit[4031]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4022 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323535356266333063616235376537306366316363623437636232 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit: BPF prog-id=176 op=LOAD Mar 17 18:35:22.910000 audit[4031]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024440 items=0 ppid=4022 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323535356266333063616235376537306366316363623437636232 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit: BPF prog-id=177 op=LOAD Mar 17 18:35:22.910000 audit[4031]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024488 items=0 ppid=4022 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323535356266333063616235376537306366316363623437636232 Mar 17 18:35:22.910000 audit: BPF prog-id=177 op=UNLOAD Mar 17 18:35:22.910000 audit: BPF prog-id=176 op=UNLOAD Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { perfmon } for pid=4031 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit[4031]: AVC avc: denied { bpf } for pid=4031 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:22.910000 audit: BPF prog-id=178 op=LOAD Mar 17 18:35:22.910000 audit[4031]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024898 items=0 ppid=4022 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323535356266333063616235376537306366316363623437636232 Mar 17 18:35:22.911000 audit[4063]: NETFILTER_CFG table=filter:112 family=2 entries=46 op=nft_register_chain pid=4063 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:35:22.911000 audit[4063]: SYSCALL arch=c000003e syscall=46 success=yes exit=21784 a0=3 a1=7ffd0ab253d0 a2=0 a3=7ffd0ab253bc items=0 ppid=3174 pid=4063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:22.911000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:35:22.912720 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:35:22.941225 env[1206]: time="2025-03-17T18:35:22.941105920Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64c69bdd46-t7wzj,Uid:c49dcab5-cce7-4080-8ab4-373d768fcabd,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b\"" Mar 17 18:35:23.112010 env[1206]: time="2025-03-17T18:35:23.111927375Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:35:23.112010 env[1206]: time="2025-03-17T18:35:23.111964276Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:35:23.112010 env[1206]: time="2025-03-17T18:35:23.111975297Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:35:23.112367 env[1206]: time="2025-03-17T18:35:23.112127110Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e pid=4077 runtime=io.containerd.runc.v2 Mar 17 18:35:23.123311 systemd[1]: Started cri-containerd-b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e.scope. Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit: BPF prog-id=179 op=LOAD Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4077 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238396366353764666338613433393637333933376565653336623939 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4077 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238396366353764666338613433393637333933376565653336623939 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit: BPF prog-id=180 op=LOAD Mar 17 18:35:23.138000 audit[4086]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000298500 items=0 ppid=4077 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238396366353764666338613433393637333933376565653336623939 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit: BPF prog-id=181 op=LOAD Mar 17 18:35:23.138000 audit[4086]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000298548 items=0 ppid=4077 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238396366353764666338613433393637333933376565653336623939 Mar 17 18:35:23.138000 audit: BPF prog-id=181 op=UNLOAD Mar 17 18:35:23.138000 audit: BPF prog-id=180 op=UNLOAD Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { perfmon } for pid=4086 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit[4086]: AVC avc: denied { bpf } for pid=4086 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.138000 audit: BPF prog-id=182 op=LOAD Mar 17 18:35:23.138000 audit[4086]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000298958 items=0 ppid=4077 pid=4086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238396366353764666338613433393637333933376565653336623939 Mar 17 18:35:23.141050 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Mar 17 18:35:23.168386 env[1206]: time="2025-03-17T18:35:23.168335211Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-qr5wz,Uid:3be65f5b-e61a-41bc-a43e-418e2fed97d7,Namespace:kube-system,Attempt:1,} returns sandbox id \"b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e\"" Mar 17 18:35:23.169908 kubelet[1968]: E0317 18:35:23.169385 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:23.171572 env[1206]: time="2025-03-17T18:35:23.171530850Z" level=info msg="CreateContainer within sandbox \"b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:35:23.188198 env[1206]: time="2025-03-17T18:35:23.188135660Z" level=info msg="CreateContainer within sandbox \"b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"2f31c91ab9db07b6c2f6fec058d484f540ca1d4bff5867f6478245e46024f18f\"" Mar 17 18:35:23.188994 env[1206]: time="2025-03-17T18:35:23.188967393Z" level=info msg="StartContainer for \"2f31c91ab9db07b6c2f6fec058d484f540ca1d4bff5867f6478245e46024f18f\"" Mar 17 18:35:23.204372 systemd[1]: Started cri-containerd-2f31c91ab9db07b6c2f6fec058d484f540ca1d4bff5867f6478245e46024f18f.scope. Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.214000 audit: BPF prog-id=183 op=LOAD Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4077 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266333163393161623964623037623663326636666563303538643438 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4077 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266333163393161623964623037623663326636666563303538643438 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit: BPF prog-id=184 op=LOAD Mar 17 18:35:23.215000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000efdc0 items=0 ppid=4077 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266333163393161623964623037623663326636666563303538643438 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit: BPF prog-id=185 op=LOAD Mar 17 18:35:23.215000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000efe08 items=0 ppid=4077 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266333163393161623964623037623663326636666563303538643438 Mar 17 18:35:23.215000 audit: BPF prog-id=185 op=UNLOAD Mar 17 18:35:23.215000 audit: BPF prog-id=184 op=UNLOAD Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { perfmon } for pid=4125 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit[4125]: AVC avc: denied { bpf } for pid=4125 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.215000 audit: BPF prog-id=186 op=LOAD Mar 17 18:35:23.215000 audit[4125]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b4218 items=0 ppid=4077 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266333163393161623964623037623663326636666563303538643438 Mar 17 18:35:23.237901 env[1206]: time="2025-03-17T18:35:23.237845969Z" level=info msg="StartContainer for \"2f31c91ab9db07b6c2f6fec058d484f540ca1d4bff5867f6478245e46024f18f\" returns successfully" Mar 17 18:35:23.248000 audit[4137]: AVC avc: denied { getattr } for pid=4137 comm="coredns" path="cgroup:[4026532315]" dev="nsfs" ino=4026532315 scontext=system_u:system_r:svirt_lxc_net_t:s0:c174,c593 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Mar 17 18:35:23.248000 audit[4137]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0000fc990 a2=c0004cd3b8 a3=0 items=0 ppid=4077 pid=4137 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c174,c593 key=(null) Mar 17 18:35:23.248000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Mar 17 18:35:23.353129 kubelet[1968]: E0317 18:35:23.353072 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:23.365874 kubelet[1968]: I0317 18:35:23.365798 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-qr5wz" podStartSLOduration=44.365776901 podStartE2EDuration="44.365776901s" podCreationTimestamp="2025-03-17 18:34:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:35:23.365269253 +0000 UTC m=+51.036933293" watchObservedRunningTime="2025-03-17 18:35:23.365776901 +0000 UTC m=+51.037440941" Mar 17 18:35:23.382000 audit[4156]: NETFILTER_CFG table=filter:113 family=2 entries=10 op=nft_register_rule pid=4156 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:23.382000 audit[4156]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffdaddf7d0 a2=0 a3=7fffdaddf7bc items=0 ppid=2118 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.382000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:23.389000 audit[4156]: NETFILTER_CFG table=nat:114 family=2 entries=44 op=nft_register_rule pid=4156 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:23.389000 audit[4156]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffdaddf7d0 a2=0 a3=7fffdaddf7bc items=0 ppid=2118 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:23.413000 audit[4158]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=4158 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:23.413000 audit[4158]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc126e9a00 a2=0 a3=7ffc126e99ec items=0 ppid=2118 pid=4158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.413000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:23.422000 audit[4158]: NETFILTER_CFG table=nat:116 family=2 entries=56 op=nft_register_chain pid=4158 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:23.422000 audit[4158]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffc126e9a00 a2=0 a3=7ffc126e99ec items=0 ppid=2118 pid=4158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.422000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:23.639966 systemd-networkd[1028]: cali9288df595b7: Gained IPv6LL Mar 17 18:35:23.831210 env[1206]: time="2025-03-17T18:35:23.831125959Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:23.833871 env[1206]: time="2025-03-17T18:35:23.833798038Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:23.836221 env[1206]: time="2025-03-17T18:35:23.836154941Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:23.838066 env[1206]: time="2025-03-17T18:35:23.838006528Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:1072d6a98167a14ca361e9ce757733f9bae36d1f1c6a9621ea10934b6b1e10d9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:23.838575 env[1206]: time="2025-03-17T18:35:23.838515299Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\" returns image reference \"sha256:6331715a2ae96b18a770a395cac108321d108e445e08b616e5bc9fbd1f9c21da\"" Mar 17 18:35:23.840341 env[1206]: time="2025-03-17T18:35:23.840282805Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:35:23.857321 env[1206]: time="2025-03-17T18:35:23.857258199Z" level=info msg="CreateContainer within sandbox \"010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Mar 17 18:35:23.879626 env[1206]: time="2025-03-17T18:35:23.879543587Z" level=info msg="CreateContainer within sandbox \"010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"64744669f5f4fecb9a657587f772264d1f6bc6fcfc5ae58c24a22275a2b94a57\"" Mar 17 18:35:23.880281 env[1206]: time="2025-03-17T18:35:23.880247383Z" level=info msg="StartContainer for \"64744669f5f4fecb9a657587f772264d1f6bc6fcfc5ae58c24a22275a2b94a57\"" Mar 17 18:35:23.900253 systemd[1]: Started cri-containerd-64744669f5f4fecb9a657587f772264d1f6bc6fcfc5ae58c24a22275a2b94a57.scope. Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.916000 audit: BPF prog-id=187 op=LOAD Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3655 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373434363639663566346665636239613635373538376637373232 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3655 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373434363639663566346665636239613635373538376637373232 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.917000 audit: BPF prog-id=188 op=LOAD Mar 17 18:35:23.917000 audit[4169]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000261d10 items=0 ppid=3655 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373434363639663566346665636239613635373538376637373232 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit: BPF prog-id=189 op=LOAD Mar 17 18:35:23.918000 audit[4169]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000261d58 items=0 ppid=3655 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373434363639663566346665636239613635373538376637373232 Mar 17 18:35:23.918000 audit: BPF prog-id=189 op=UNLOAD Mar 17 18:35:23.918000 audit: BPF prog-id=188 op=UNLOAD Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { perfmon } for pid=4169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit[4169]: AVC avc: denied { bpf } for pid=4169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:23.918000 audit: BPF prog-id=190 op=LOAD Mar 17 18:35:23.918000 audit[4169]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c8168 items=0 ppid=3655 pid=4169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:23.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634373434363639663566346665636239613635373538376637373232 Mar 17 18:35:23.954911 env[1206]: time="2025-03-17T18:35:23.954837219Z" level=info msg="StartContainer for \"64744669f5f4fecb9a657587f772264d1f6bc6fcfc5ae58c24a22275a2b94a57\" returns successfully" Mar 17 18:35:24.359827 kubelet[1968]: E0317 18:35:24.359465 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:24.414772 kubelet[1968]: I0317 18:35:24.414578 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-cdbb544d5-c6ssd" podStartSLOduration=29.682769873 podStartE2EDuration="33.41451168s" podCreationTimestamp="2025-03-17 18:34:51 +0000 UTC" firstStartedPulling="2025-03-17 18:35:20.107973315 +0000 UTC m=+47.779637345" lastFinishedPulling="2025-03-17 18:35:23.839715102 +0000 UTC m=+51.511379152" observedRunningTime="2025-03-17 18:35:24.413498369 +0000 UTC m=+52.085162429" watchObservedRunningTime="2025-03-17 18:35:24.41451168 +0000 UTC m=+52.086175720" Mar 17 18:35:24.526874 systemd-networkd[1028]: cali42e0fcb8e59: Gained IPv6LL Mar 17 18:35:24.591344 systemd-networkd[1028]: cali6a28a2d0da7: Gained IPv6LL Mar 17 18:35:25.369910 kubelet[1968]: E0317 18:35:25.369440 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:27.901141 systemd[1]: Started sshd@13-10.0.0.17:22-10.0.0.1:59438.service. Mar 17 18:35:27.915676 kernel: kauditd_printk_skb: 329 callbacks suppressed Mar 17 18:35:27.915803 kernel: audit: type=1130 audit(1742236527.903:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.17:22-10.0.0.1:59438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:27.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.17:22-10.0.0.1:59438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:27.995211 sshd[4217]: Accepted publickey for core from 10.0.0.1 port 59438 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:28.008828 kernel: audit: type=1101 audit(1742236527.993:1337): pid=4217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.009023 kernel: audit: type=1103 audit(1742236527.999:1338): pid=4217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:27.993000 audit[4217]: USER_ACCT pid=4217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:27.999000 audit[4217]: CRED_ACQ pid=4217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.001769 sshd[4217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:28.009522 systemd[1]: Started session-14.scope. Mar 17 18:35:28.013187 kernel: audit: type=1006 audit(1742236527.999:1339): pid=4217 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Mar 17 18:35:28.011679 systemd-logind[1191]: New session 14 of user core. Mar 17 18:35:27.999000 audit[4217]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5c22b400 a2=3 a3=0 items=0 ppid=1 pid=4217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:27.999000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:28.020964 kernel: audit: type=1300 audit(1742236527.999:1339): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5c22b400 a2=3 a3=0 items=0 ppid=1 pid=4217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:28.021032 kernel: audit: type=1327 audit(1742236527.999:1339): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:28.023000 audit[4217]: USER_START pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.025000 audit[4221]: CRED_ACQ pid=4221 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.037889 kernel: audit: type=1105 audit(1742236528.023:1340): pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.037982 kernel: audit: type=1103 audit(1742236528.025:1341): pid=4221 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.280847 sshd[4217]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:28.290321 kernel: audit: type=1106 audit(1742236528.282:1342): pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.282000 audit[4217]: USER_END pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.286857 systemd[1]: sshd@13-10.0.0.17:22-10.0.0.1:59438.service: Deactivated successfully. Mar 17 18:35:28.287810 systemd[1]: session-14.scope: Deactivated successfully. Mar 17 18:35:28.282000 audit[4217]: CRED_DISP pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.293353 systemd-logind[1191]: Session 14 logged out. Waiting for processes to exit. Mar 17 18:35:28.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.17:22-10.0.0.1:59438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:28.296356 kernel: audit: type=1104 audit(1742236528.282:1343): pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:28.304097 systemd-logind[1191]: Removed session 14. Mar 17 18:35:28.563561 env[1206]: time="2025-03-17T18:35:28.562747357Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:28.573000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:28.573000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00248b7c0 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:35:28.573000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:35:28.573000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:28.573000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012912f0 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:35:28.573000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:35:28.588513 env[1206]: time="2025-03-17T18:35:28.572493394Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:28.588513 env[1206]: time="2025-03-17T18:35:28.580886953Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:28.588513 env[1206]: time="2025-03-17T18:35:28.585991357Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:28.600783 env[1206]: time="2025-03-17T18:35:28.600534215Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Mar 17 18:35:28.604456 env[1206]: time="2025-03-17T18:35:28.604403095Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\"" Mar 17 18:35:28.607524 env[1206]: time="2025-03-17T18:35:28.607467861Z" level=info msg="CreateContainer within sandbox \"130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:35:28.664035 env[1206]: time="2025-03-17T18:35:28.663900697Z" level=info msg="CreateContainer within sandbox \"130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ae66190952b7c9c210933cd1b0d38b7bb0aa4d74bf2323ce35a017c8d8967cfa\"" Mar 17 18:35:28.667159 env[1206]: time="2025-03-17T18:35:28.665273965Z" level=info msg="StartContainer for \"ae66190952b7c9c210933cd1b0d38b7bb0aa4d74bf2323ce35a017c8d8967cfa\"" Mar 17 18:35:28.706070 systemd[1]: Started cri-containerd-ae66190952b7c9c210933cd1b0d38b7bb0aa4d74bf2323ce35a017c8d8967cfa.scope. Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.734000 audit: BPF prog-id=191 op=LOAD Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3710 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:28.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363631393039353262376339633231303933336364316230643338 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3710 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:28.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363631393039353262376339633231303933336364316230643338 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.736000 audit: BPF prog-id=192 op=LOAD Mar 17 18:35:28.736000 audit[4244]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003da050 items=0 ppid=3710 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:28.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363631393039353262376339633231303933336364316230643338 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit: BPF prog-id=193 op=LOAD Mar 17 18:35:28.737000 audit[4244]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003da098 items=0 ppid=3710 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:28.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363631393039353262376339633231303933336364316230643338 Mar 17 18:35:28.737000 audit: BPF prog-id=193 op=UNLOAD Mar 17 18:35:28.737000 audit: BPF prog-id=192 op=UNLOAD Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { perfmon } for pid=4244 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit[4244]: AVC avc: denied { bpf } for pid=4244 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:28.737000 audit: BPF prog-id=194 op=LOAD Mar 17 18:35:28.737000 audit[4244]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003da4a8 items=0 ppid=3710 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:28.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165363631393039353262376339633231303933336364316230643338 Mar 17 18:35:28.785973 env[1206]: time="2025-03-17T18:35:28.785899870Z" level=info msg="StartContainer for \"ae66190952b7c9c210933cd1b0d38b7bb0aa4d74bf2323ce35a017c8d8967cfa\" returns successfully" Mar 17 18:35:29.270000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:29.270000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0079226a0 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:35:29.270000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:35:29.270000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:29.270000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00f6140c0 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:35:29.270000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:35:29.284000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:29.284000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00e851ce0 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:35:29.284000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:35:29.285000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:29.285000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c00e851d40 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:35:29.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:35:29.286000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7300 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:29.286000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00e851e00 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:35:29.286000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:35:29.286000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:29.286000 audit[1840]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00fc87e40 a2=fc6 a3=0 items=0 ppid=1672 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c647,c908 key=(null) Mar 17 18:35:29.286000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Mar 17 18:35:29.425672 kubelet[1968]: I0317 18:35:29.423124 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64c69bdd46-l589x" podStartSLOduration=30.079234321 podStartE2EDuration="38.423103562s" podCreationTimestamp="2025-03-17 18:34:51 +0000 UTC" firstStartedPulling="2025-03-17 18:35:20.259336195 +0000 UTC m=+47.931000225" lastFinishedPulling="2025-03-17 18:35:28.603205426 +0000 UTC m=+56.274869466" observedRunningTime="2025-03-17 18:35:29.42247216 +0000 UTC m=+57.094136221" watchObservedRunningTime="2025-03-17 18:35:29.423103562 +0000 UTC m=+57.094767602" Mar 17 18:35:29.470000 audit[4277]: NETFILTER_CFG table=filter:117 family=2 entries=10 op=nft_register_rule pid=4277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:29.470000 audit[4277]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcf16c3da0 a2=0 a3=7ffcf16c3d8c items=0 ppid=2118 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:29.470000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:29.476000 audit[4277]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=4277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:29.476000 audit[4277]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcf16c3da0 a2=0 a3=7ffcf16c3d8c items=0 ppid=2118 pid=4277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:29.476000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:30.021000 audit[4256]: AVC avc: denied { watch } for pid=4256 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_35_06.2015912417/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c843 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c698,c843 tclass=file permissive=0 Mar 17 18:35:30.021000 audit[4256]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000cc79a0 a2=fc6 a3=0 items=0 ppid=3710 pid=4256 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c843 key=(null) Mar 17 18:35:30.021000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:35:30.388331 kubelet[1968]: I0317 18:35:30.388215 1968 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:35:30.818622 env[1206]: time="2025-03-17T18:35:30.818501546Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:30.820627 env[1206]: time="2025-03-17T18:35:30.820596264Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:30.822404 env[1206]: time="2025-03-17T18:35:30.822366540Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:30.824201 env[1206]: time="2025-03-17T18:35:30.824138127Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:eaa7e01fb16b603c155a67b81f16992281db7f831684c7b2081d3434587a7ff3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:30.824612 env[1206]: time="2025-03-17T18:35:30.824569986Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\" returns image reference \"sha256:bda8c42e04758c4f061339e213f50ccdc7502c4176fbf631aa12357e62b63540\"" Mar 17 18:35:30.826228 env[1206]: time="2025-03-17T18:35:30.826179463Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:35:30.826699 env[1206]: time="2025-03-17T18:35:30.826669363Z" level=info msg="CreateContainer within sandbox \"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Mar 17 18:35:30.845302 env[1206]: time="2025-03-17T18:35:30.845225083Z" level=info msg="CreateContainer within sandbox \"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"3ea88cd3b9abf760f96140b99ad0c92cf6187a1f90126d6c7d3c173b94fa2c0c\"" Mar 17 18:35:30.845966 env[1206]: time="2025-03-17T18:35:30.845927500Z" level=info msg="StartContainer for \"3ea88cd3b9abf760f96140b99ad0c92cf6187a1f90126d6c7d3c173b94fa2c0c\"" Mar 17 18:35:30.870049 systemd[1]: run-containerd-runc-k8s.io-3ea88cd3b9abf760f96140b99ad0c92cf6187a1f90126d6c7d3c173b94fa2c0c-runc.8pEXmt.mount: Deactivated successfully. Mar 17 18:35:30.872111 systemd[1]: Started cri-containerd-3ea88cd3b9abf760f96140b99ad0c92cf6187a1f90126d6c7d3c173b94fa2c0c.scope. Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f1304d9d7a8 items=0 ppid=3818 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:30.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365613838636433623961626637363066393631343062393961643063 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit: BPF prog-id=195 op=LOAD Mar 17 18:35:30.889000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00028f208 items=0 ppid=3818 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:30.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365613838636433623961626637363066393631343062393961643063 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.889000 audit: BPF prog-id=196 op=LOAD Mar 17 18:35:30.889000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00028f258 items=0 ppid=3818 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:30.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365613838636433623961626637363066393631343062393961643063 Mar 17 18:35:30.890000 audit: BPF prog-id=196 op=UNLOAD Mar 17 18:35:30.890000 audit: BPF prog-id=195 op=UNLOAD Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { perfmon } for pid=4286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit[4286]: AVC avc: denied { bpf } for pid=4286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:30.890000 audit: BPF prog-id=197 op=LOAD Mar 17 18:35:30.890000 audit[4286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00028f2e8 items=0 ppid=3818 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:30.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365613838636433623961626637363066393631343062393961643063 Mar 17 18:35:30.968553 env[1206]: time="2025-03-17T18:35:30.968479972Z" level=info msg="StartContainer for \"3ea88cd3b9abf760f96140b99ad0c92cf6187a1f90126d6c7d3c173b94fa2c0c\" returns successfully" Mar 17 18:35:31.564057 env[1206]: time="2025-03-17T18:35:31.563970049Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:31.568186 env[1206]: time="2025-03-17T18:35:31.568130464Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:31.570421 env[1206]: time="2025-03-17T18:35:31.570380046Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:31.573797 env[1206]: time="2025-03-17T18:35:31.573738885Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:31.574339 env[1206]: time="2025-03-17T18:35:31.574248121Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:421726ace5ed13894f7edf594dd3a462947aedc13d0f69d08525d7369477fb70\"" Mar 17 18:35:31.575609 env[1206]: time="2025-03-17T18:35:31.575583941Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\"" Mar 17 18:35:31.578566 env[1206]: time="2025-03-17T18:35:31.578482698Z" level=info msg="CreateContainer within sandbox \"612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:35:31.604621 env[1206]: time="2025-03-17T18:35:31.604526050Z" level=info msg="CreateContainer within sandbox \"612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"2b20e580d9e2010bef864898d19c80b4fd6de9f91bc9657fa2f65cf426188118\"" Mar 17 18:35:31.605340 env[1206]: time="2025-03-17T18:35:31.605299854Z" level=info msg="StartContainer for \"2b20e580d9e2010bef864898d19c80b4fd6de9f91bc9657fa2f65cf426188118\"" Mar 17 18:35:31.634007 systemd[1]: Started cri-containerd-2b20e580d9e2010bef864898d19c80b4fd6de9f91bc9657fa2f65cf426188118.scope. Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.647000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.650000 audit: BPF prog-id=198 op=LOAD Mar 17 18:35:31.650000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.650000 audit[4320]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4022 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:31.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323065353830643965323031306265663836343839386431396338 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4022 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:31.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323065353830643965323031306265663836343839386431396338 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.651000 audit: BPF prog-id=199 op=LOAD Mar 17 18:35:31.651000 audit[4320]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000230e40 items=0 ppid=4022 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:31.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323065353830643965323031306265663836343839386431396338 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.652000 audit: BPF prog-id=200 op=LOAD Mar 17 18:35:31.652000 audit[4320]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000230e88 items=0 ppid=4022 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:31.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323065353830643965323031306265663836343839386431396338 Mar 17 18:35:31.653000 audit: BPF prog-id=200 op=UNLOAD Mar 17 18:35:31.653000 audit: BPF prog-id=199 op=UNLOAD Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { perfmon } for pid=4320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit[4320]: AVC avc: denied { bpf } for pid=4320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:31.654000 audit: BPF prog-id=201 op=LOAD Mar 17 18:35:31.654000 audit[4320]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000231298 items=0 ppid=4022 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:31.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323065353830643965323031306265663836343839386431396338 Mar 17 18:35:31.693157 env[1206]: time="2025-03-17T18:35:31.691496676Z" level=info msg="StartContainer for \"2b20e580d9e2010bef864898d19c80b4fd6de9f91bc9657fa2f65cf426188118\" returns successfully" Mar 17 18:35:32.409890 env[1206]: time="2025-03-17T18:35:32.409836754Z" level=info msg="StopPodSandbox for \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\"" Mar 17 18:35:32.445000 audit[4376]: NETFILTER_CFG table=filter:119 family=2 entries=10 op=nft_register_rule pid=4376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:32.445000 audit[4376]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff373111d0 a2=0 a3=7fff373111bc items=0 ppid=2118 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:32.445000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:32.451000 audit[4376]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:32.451000 audit[4376]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff373111d0 a2=0 a3=7fff373111bc items=0 ppid=2118 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:32.451000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.487 [WARNING][4368] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"c49dcab5-cce7-4080-8ab4-373d768fcabd", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b", Pod:"calico-apiserver-64c69bdd46-t7wzj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6a28a2d0da7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.487 [INFO][4368] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.487 [INFO][4368] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" iface="eth0" netns="" Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.487 [INFO][4368] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.487 [INFO][4368] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.519 [INFO][4379] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.520 [INFO][4379] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.520 [INFO][4379] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.528 [WARNING][4379] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.528 [INFO][4379] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.535 [INFO][4379] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:32.543171 env[1206]: 2025-03-17 18:35:32.538 [INFO][4368] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.543171 env[1206]: time="2025-03-17T18:35:32.543124056Z" level=info msg="TearDown network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\" successfully" Mar 17 18:35:32.543171 env[1206]: time="2025-03-17T18:35:32.543171276Z" level=info msg="StopPodSandbox for \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\" returns successfully" Mar 17 18:35:32.544105 env[1206]: time="2025-03-17T18:35:32.544040863Z" level=info msg="RemovePodSandbox for \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\"" Mar 17 18:35:32.544152 env[1206]: time="2025-03-17T18:35:32.544091470Z" level=info msg="Forcibly stopping sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\"" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.616 [WARNING][4402] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"c49dcab5-cce7-4080-8ab4-373d768fcabd", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"612555bf30cab57e70cf1ccb47cb23ce17b4c74dc874698bb1e93d4d6811266b", Pod:"calico-apiserver-64c69bdd46-t7wzj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6a28a2d0da7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.617 [INFO][4402] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.617 [INFO][4402] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" iface="eth0" netns="" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.617 [INFO][4402] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.617 [INFO][4402] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.662 [INFO][4409] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.662 [INFO][4409] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.662 [INFO][4409] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.795 [WARNING][4409] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.796 [INFO][4409] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" HandleID="k8s-pod-network.31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Workload="localhost-k8s-calico--apiserver--64c69bdd46--t7wzj-eth0" Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.799 [INFO][4409] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:32.803780 env[1206]: 2025-03-17 18:35:32.801 [INFO][4402] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312" Mar 17 18:35:32.804488 env[1206]: time="2025-03-17T18:35:32.803818415Z" level=info msg="TearDown network for sandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\" successfully" Mar 17 18:35:32.912981 env[1206]: time="2025-03-17T18:35:32.912874905Z" level=info msg="RemovePodSandbox \"31ed5457d0c8d415fd4279cc9bcddf62899989c00d92253644ac51b9216db312\" returns successfully" Mar 17 18:35:32.913725 env[1206]: time="2025-03-17T18:35:32.913693824Z" level=info msg="StopPodSandbox for \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\"" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:32.989 [WARNING][4433] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0", GenerateName:"calico-kube-controllers-cdbb544d5-", Namespace:"calico-system", SelfLink:"", UID:"770c5f5a-046e-47e9-8ac7-76a9008768a6", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cdbb544d5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8", Pod:"calico-kube-controllers-cdbb544d5-c6ssd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5cce3e045da", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:32.989 [INFO][4433] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:32.989 [INFO][4433] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" iface="eth0" netns="" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:32.989 [INFO][4433] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:32.989 [INFO][4433] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:33.018 [INFO][4442] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:33.018 [INFO][4442] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:33.018 [INFO][4442] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:33.026 [WARNING][4442] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:33.027 [INFO][4442] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:33.043 [INFO][4442] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:33.048497 env[1206]: 2025-03-17 18:35:33.045 [INFO][4433] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.049141 env[1206]: time="2025-03-17T18:35:33.048536925Z" level=info msg="TearDown network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\" successfully" Mar 17 18:35:33.049141 env[1206]: time="2025-03-17T18:35:33.048583454Z" level=info msg="StopPodSandbox for \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\" returns successfully" Mar 17 18:35:33.049237 env[1206]: time="2025-03-17T18:35:33.049178433Z" level=info msg="RemovePodSandbox for \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\"" Mar 17 18:35:33.049276 env[1206]: time="2025-03-17T18:35:33.049216045Z" level=info msg="Forcibly stopping sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\"" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.127 [WARNING][4464] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0", GenerateName:"calico-kube-controllers-cdbb544d5-", Namespace:"calico-system", SelfLink:"", UID:"770c5f5a-046e-47e9-8ac7-76a9008768a6", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"cdbb544d5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"010b4f9f4161a18b5dc079186c2e9e4e94f2bbca0245b6dd6db9d6136c36efa8", Pod:"calico-kube-controllers-cdbb544d5-c6ssd", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5cce3e045da", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.127 [INFO][4464] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.127 [INFO][4464] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" iface="eth0" netns="" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.127 [INFO][4464] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.127 [INFO][4464] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.155 [INFO][4471] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.155 [INFO][4471] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.155 [INFO][4471] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.181 [WARNING][4471] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.181 [INFO][4471] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" HandleID="k8s-pod-network.b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Workload="localhost-k8s-calico--kube--controllers--cdbb544d5--c6ssd-eth0" Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.184 [INFO][4471] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:33.191765 env[1206]: 2025-03-17 18:35:33.186 [INFO][4464] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00" Mar 17 18:35:33.192600 env[1206]: time="2025-03-17T18:35:33.192541575Z" level=info msg="TearDown network for sandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\" successfully" Mar 17 18:35:33.266397 env[1206]: time="2025-03-17T18:35:33.266334779Z" level=info msg="RemovePodSandbox \"b321ba2c9b895d488587b57c6200f51ba8d0bd8278de02a0cc6f588e43b8cc00\" returns successfully" Mar 17 18:35:33.267031 env[1206]: time="2025-03-17T18:35:33.266995564Z" level=info msg="StopPodSandbox for \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\"" Mar 17 18:35:33.286367 systemd[1]: Started sshd@14-10.0.0.17:22-10.0.0.1:59444.service. Mar 17 18:35:33.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.17:22-10.0.0.1:59444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:33.298756 kernel: kauditd_printk_skb: 197 callbacks suppressed Mar 17 18:35:33.298905 kernel: audit: type=1130 audit(1742236533.285:1400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.17:22-10.0.0.1:59444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.316 [WARNING][4493] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d87e993-d1bd-413d-a2dd-de47fa642094", ResourceVersion:"872", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253", Pod:"coredns-668d6bf9bc-gsgnn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3931ec4ae3b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.316 [INFO][4493] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.316 [INFO][4493] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" iface="eth0" netns="" Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.316 [INFO][4493] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.316 [INFO][4493] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.344 [INFO][4502] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.344 [INFO][4502] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.344 [INFO][4502] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.362 [WARNING][4502] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.362 [INFO][4502] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.364 [INFO][4502] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:33.367937 env[1206]: 2025-03-17 18:35:33.366 [INFO][4493] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.367000 audit[4500]: USER_ACCT pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.373071 env[1206]: time="2025-03-17T18:35:33.368530777Z" level=info msg="TearDown network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\" successfully" Mar 17 18:35:33.373071 env[1206]: time="2025-03-17T18:35:33.368558930Z" level=info msg="StopPodSandbox for \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\" returns successfully" Mar 17 18:35:33.373071 env[1206]: time="2025-03-17T18:35:33.369072553Z" level=info msg="RemovePodSandbox for \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\"" Mar 17 18:35:33.373071 env[1206]: time="2025-03-17T18:35:33.369117279Z" level=info msg="Forcibly stopping sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\"" Mar 17 18:35:33.373252 kernel: audit: type=1101 audit(1742236533.367:1401): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.373283 sshd[4500]: Accepted publickey for core from 10.0.0.1 port 59444 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:33.371000 audit[4500]: CRED_ACQ pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.374122 sshd[4500]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:33.380732 kernel: audit: type=1103 audit(1742236533.371:1402): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.380782 kernel: audit: type=1006 audit(1742236533.372:1403): pid=4500 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Mar 17 18:35:33.372000 audit[4500]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd196529a0 a2=3 a3=0 items=0 ppid=1 pid=4500 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:33.383939 systemd[1]: Started session-15.scope. Mar 17 18:35:33.384724 systemd-logind[1191]: New session 15 of user core. Mar 17 18:35:33.385972 kernel: audit: type=1300 audit(1742236533.372:1403): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd196529a0 a2=3 a3=0 items=0 ppid=1 pid=4500 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:33.372000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:33.394498 kernel: audit: type=1327 audit(1742236533.372:1403): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:33.394570 kernel: audit: type=1400 audit(1742236533.373:1404): avc: denied { watch } for pid=4331 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_35_06.3556538381/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c330,c903 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c330,c903 tclass=file permissive=0 Mar 17 18:35:33.373000 audit[4331]: AVC avc: denied { watch } for pid=4331 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_35_06.3556538381/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c330,c903 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c330,c903 tclass=file permissive=0 Mar 17 18:35:33.400464 kernel: audit: type=1300 audit(1742236533.373:1404): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00048b1a0 a2=fc6 a3=0 items=0 ppid=4022 pid=4331 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c330,c903 key=(null) Mar 17 18:35:33.373000 audit[4331]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00048b1a0 a2=fc6 a3=0 items=0 ppid=4022 pid=4331 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c330,c903 key=(null) Mar 17 18:35:33.404614 kernel: audit: type=1327 audit(1742236533.373:1404): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:35:33.373000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:35:33.390000 audit[4500]: USER_START pid=4500 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.393000 audit[4527]: CRED_ACQ pid=4527 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.410115 kernel: audit: type=1105 audit(1742236533.390:1405): pid=4500 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.428966 kubelet[1968]: I0317 18:35:33.428634 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64c69bdd46-t7wzj" podStartSLOduration=33.795634222 podStartE2EDuration="42.428616173s" podCreationTimestamp="2025-03-17 18:34:51 +0000 UTC" firstStartedPulling="2025-03-17 18:35:22.942243654 +0000 UTC m=+50.613907694" lastFinishedPulling="2025-03-17 18:35:31.575225604 +0000 UTC m=+59.246889645" observedRunningTime="2025-03-17 18:35:32.418898244 +0000 UTC m=+60.090562284" watchObservedRunningTime="2025-03-17 18:35:33.428616173 +0000 UTC m=+61.100280213" Mar 17 18:35:33.442000 audit[4539]: NETFILTER_CFG table=filter:121 family=2 entries=9 op=nft_register_rule pid=4539 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:33.442000 audit[4539]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffefc983fa0 a2=0 a3=7ffefc983f8c items=0 ppid=2118 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:33.442000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:33.446000 audit[4539]: NETFILTER_CFG table=nat:122 family=2 entries=27 op=nft_register_chain pid=4539 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:33.446000 audit[4539]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffefc983fa0 a2=0 a3=7ffefc983f8c items=0 ppid=2118 pid=4539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:33.446000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.535 [WARNING][4526] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"6d87e993-d1bd-413d-a2dd-de47fa642094", ResourceVersion:"872", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9418758ec635af5544581868a9306cd853a2568f01d50abf6ca30b423d28a253", Pod:"coredns-668d6bf9bc-gsgnn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3931ec4ae3b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.535 [INFO][4526] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.535 [INFO][4526] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" iface="eth0" netns="" Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.535 [INFO][4526] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.535 [INFO][4526] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.566 [INFO][4540] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.567 [INFO][4540] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.567 [INFO][4540] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.575 [WARNING][4540] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.575 [INFO][4540] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" HandleID="k8s-pod-network.3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Workload="localhost-k8s-coredns--668d6bf9bc--gsgnn-eth0" Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.581 [INFO][4540] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:33.590144 env[1206]: 2025-03-17 18:35:33.586 [INFO][4526] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c" Mar 17 18:35:33.591032 env[1206]: time="2025-03-17T18:35:33.590989664Z" level=info msg="TearDown network for sandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\" successfully" Mar 17 18:35:33.931159 sshd[4500]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:33.931000 audit[4500]: USER_END pid=4500 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.931000 audit[4500]: CRED_DISP pid=4500 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:33.934228 systemd[1]: sshd@14-10.0.0.17:22-10.0.0.1:59444.service: Deactivated successfully. Mar 17 18:35:33.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.17:22-10.0.0.1:59444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:33.935044 systemd[1]: session-15.scope: Deactivated successfully. Mar 17 18:35:33.935779 systemd-logind[1191]: Session 15 logged out. Waiting for processes to exit. Mar 17 18:35:33.936657 systemd-logind[1191]: Removed session 15. Mar 17 18:35:33.988360 env[1206]: time="2025-03-17T18:35:33.988295927Z" level=info msg="RemovePodSandbox \"3d00a115c6bc68d3cee9f590c6204d46397c817f71a4101f785dfc80f95ea76c\" returns successfully" Mar 17 18:35:33.989035 env[1206]: time="2025-03-17T18:35:33.988980468Z" level=info msg="StopPodSandbox for \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\"" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.026 [WARNING][4569] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3be65f5b-e61a-41bc-a43e-418e2fed97d7", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e", Pod:"coredns-668d6bf9bc-qr5wz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali42e0fcb8e59", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.026 [INFO][4569] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.026 [INFO][4569] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" iface="eth0" netns="" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.026 [INFO][4569] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.026 [INFO][4569] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.048 [INFO][4576] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.048 [INFO][4576] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.048 [INFO][4576] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.055 [WARNING][4576] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.055 [INFO][4576] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.057 [INFO][4576] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:34.060271 env[1206]: 2025-03-17 18:35:34.058 [INFO][4569] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.060870 env[1206]: time="2025-03-17T18:35:34.060304763Z" level=info msg="TearDown network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\" successfully" Mar 17 18:35:34.060870 env[1206]: time="2025-03-17T18:35:34.060337265Z" level=info msg="StopPodSandbox for \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\" returns successfully" Mar 17 18:35:34.060935 env[1206]: time="2025-03-17T18:35:34.060875375Z" level=info msg="RemovePodSandbox for \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\"" Mar 17 18:35:34.060968 env[1206]: time="2025-03-17T18:35:34.060908859Z" level=info msg="Forcibly stopping sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\"" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.101 [WARNING][4599] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"3be65f5b-e61a-41bc-a43e-418e2fed97d7", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b89cf57dfc8a439673937eee36b993686bad2cdaee9301a12a8f22df19571a3e", Pod:"coredns-668d6bf9bc-qr5wz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali42e0fcb8e59", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.102 [INFO][4599] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.102 [INFO][4599] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" iface="eth0" netns="" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.102 [INFO][4599] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.102 [INFO][4599] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.124 [INFO][4607] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.124 [INFO][4607] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.124 [INFO][4607] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.131 [WARNING][4607] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.131 [INFO][4607] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" HandleID="k8s-pod-network.cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Workload="localhost-k8s-coredns--668d6bf9bc--qr5wz-eth0" Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.133 [INFO][4607] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:34.136416 env[1206]: 2025-03-17 18:35:34.134 [INFO][4599] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea" Mar 17 18:35:34.136994 env[1206]: time="2025-03-17T18:35:34.136460011Z" level=info msg="TearDown network for sandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\" successfully" Mar 17 18:35:34.323070 env[1206]: time="2025-03-17T18:35:34.322886934Z" level=info msg="RemovePodSandbox \"cf4a3b21afe674eb4a418f4e26438c3fa94a9f14d9a2db03e21b8bbb4d0502ea\" returns successfully" Mar 17 18:35:34.323970 env[1206]: time="2025-03-17T18:35:34.323838034Z" level=info msg="StopPodSandbox for \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\"" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.369 [WARNING][4631] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--4wbdt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c88f573a-e921-402f-948e-f2b285a2928f", ResourceVersion:"909", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58", Pod:"csi-node-driver-4wbdt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9288df595b7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.369 [INFO][4631] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.369 [INFO][4631] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" iface="eth0" netns="" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.369 [INFO][4631] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.369 [INFO][4631] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.399 [INFO][4638] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.399 [INFO][4638] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.399 [INFO][4638] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.407 [WARNING][4638] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.407 [INFO][4638] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.409 [INFO][4638] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:34.413444 env[1206]: 2025-03-17 18:35:34.411 [INFO][4631] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.414049 env[1206]: time="2025-03-17T18:35:34.413481283Z" level=info msg="TearDown network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\" successfully" Mar 17 18:35:34.414049 env[1206]: time="2025-03-17T18:35:34.413521590Z" level=info msg="StopPodSandbox for \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\" returns successfully" Mar 17 18:35:34.414918 env[1206]: time="2025-03-17T18:35:34.414847457Z" level=info msg="RemovePodSandbox for \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\"" Mar 17 18:35:34.415130 env[1206]: time="2025-03-17T18:35:34.415043172Z" level=info msg="Forcibly stopping sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\"" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.464 [WARNING][4661] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--4wbdt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"c88f573a-e921-402f-948e-f2b285a2928f", ResourceVersion:"909", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58", Pod:"csi-node-driver-4wbdt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali9288df595b7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.464 [INFO][4661] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.464 [INFO][4661] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" iface="eth0" netns="" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.464 [INFO][4661] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.464 [INFO][4661] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.488 [INFO][4668] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.488 [INFO][4668] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.488 [INFO][4668] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.497 [WARNING][4668] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.497 [INFO][4668] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" HandleID="k8s-pod-network.90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Workload="localhost-k8s-csi--node--driver--4wbdt-eth0" Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.500 [INFO][4668] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:34.503802 env[1206]: 2025-03-17 18:35:34.501 [INFO][4661] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18" Mar 17 18:35:34.504469 env[1206]: time="2025-03-17T18:35:34.503854039Z" level=info msg="TearDown network for sandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\" successfully" Mar 17 18:35:34.510841 env[1206]: time="2025-03-17T18:35:34.510775764Z" level=info msg="RemovePodSandbox \"90de73f11451e50d0f3aa3c2450656ab81375efc63bf09c3f2f908e302af3a18\" returns successfully" Mar 17 18:35:34.511428 env[1206]: time="2025-03-17T18:35:34.511380822Z" level=info msg="StopPodSandbox for \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\"" Mar 17 18:35:34.562595 env[1206]: time="2025-03-17T18:35:34.562530326Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:34.566236 env[1206]: time="2025-03-17T18:35:34.564760674Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:34.566981 env[1206]: time="2025-03-17T18:35:34.566930888Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:34.569915 env[1206]: time="2025-03-17T18:35:34.569836558Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:a338da9488cbaa83c78457c3d7354d84149969c0480e88dd768e036632ff5b76,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:35:34.570194 env[1206]: time="2025-03-17T18:35:34.570154677Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\" returns image reference \"sha256:8b7d18f262d5cf6a6343578ad0db68a140c4c9989d9e02c58c27cb5d2c70320f\"" Mar 17 18:35:34.575183 env[1206]: time="2025-03-17T18:35:34.573418753Z" level=info msg="CreateContainer within sandbox \"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Mar 17 18:35:34.606825 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4100347044.mount: Deactivated successfully. Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.554 [WARNING][4691] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"6279e997-1d7d-4066-828e-e7a79ace4c93", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4", Pod:"calico-apiserver-64c69bdd46-l589x", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e11dd554c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.554 [INFO][4691] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.554 [INFO][4691] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" iface="eth0" netns="" Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.554 [INFO][4691] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.554 [INFO][4691] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.588 [INFO][4698] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.588 [INFO][4698] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.589 [INFO][4698] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.596 [WARNING][4698] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.597 [INFO][4698] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.606 [INFO][4698] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:34.610234 env[1206]: 2025-03-17 18:35:34.608 [INFO][4691] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.611064 env[1206]: time="2025-03-17T18:35:34.611012746Z" level=info msg="TearDown network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\" successfully" Mar 17 18:35:34.611064 env[1206]: time="2025-03-17T18:35:34.611052403Z" level=info msg="StopPodSandbox for \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\" returns successfully" Mar 17 18:35:34.611909 env[1206]: time="2025-03-17T18:35:34.611856862Z" level=info msg="RemovePodSandbox for \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\"" Mar 17 18:35:34.611982 env[1206]: time="2025-03-17T18:35:34.611911166Z" level=info msg="Forcibly stopping sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\"" Mar 17 18:35:34.616660 env[1206]: time="2025-03-17T18:35:34.616597625Z" level=info msg="CreateContainer within sandbox \"20662033a793356dd699dcee29850a678cbbbf0102a103ce8a51362349aa5e58\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"95b07f6e0474ab54219b2111c2392ccbc46b13e3b250e15a926e223583326aa2\"" Mar 17 18:35:34.617547 env[1206]: time="2025-03-17T18:35:34.617505742Z" level=info msg="StartContainer for \"95b07f6e0474ab54219b2111c2392ccbc46b13e3b250e15a926e223583326aa2\"" Mar 17 18:35:34.654342 systemd[1]: Started cri-containerd-95b07f6e0474ab54219b2111c2392ccbc46b13e3b250e15a926e223583326aa2.scope. Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f9a329aeb08 items=0 ppid=3818 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:34.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623037663665303437346162353432313962323131316332333932 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit: BPF prog-id=202 op=LOAD Mar 17 18:35:34.670000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003c0528 items=0 ppid=3818 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:34.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623037663665303437346162353432313962323131316332333932 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit: BPF prog-id=203 op=LOAD Mar 17 18:35:34.670000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003c0578 items=0 ppid=3818 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:34.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623037663665303437346162353432313962323131316332333932 Mar 17 18:35:34.670000 audit: BPF prog-id=203 op=UNLOAD Mar 17 18:35:34.670000 audit: BPF prog-id=202 op=UNLOAD Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { perfmon } for pid=4729 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit[4729]: AVC avc: denied { bpf } for pid=4729 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:35:34.670000 audit: BPF prog-id=204 op=LOAD Mar 17 18:35:34.670000 audit[4729]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003c0608 items=0 ppid=3818 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:34.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623037663665303437346162353432313962323131316332333932 Mar 17 18:35:34.696403 env[1206]: time="2025-03-17T18:35:34.696340347Z" level=info msg="StartContainer for \"95b07f6e0474ab54219b2111c2392ccbc46b13e3b250e15a926e223583326aa2\" returns successfully" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.684 [WARNING][4733] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0", GenerateName:"calico-apiserver-64c69bdd46-", Namespace:"calico-apiserver", SelfLink:"", UID:"6279e997-1d7d-4066-828e-e7a79ace4c93", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 34, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64c69bdd46", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"130fe18c5f8803cab49491840bede03ae6c4af8bb93fb0e4e0dd08c9c28a29d4", Pod:"calico-apiserver-64c69bdd46-l589x", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1e11dd554c4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.684 [INFO][4733] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.684 [INFO][4733] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" iface="eth0" netns="" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.684 [INFO][4733] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.684 [INFO][4733] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.707 [INFO][4761] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.708 [INFO][4761] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.708 [INFO][4761] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.715 [WARNING][4761] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.715 [INFO][4761] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" HandleID="k8s-pod-network.242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Workload="localhost-k8s-calico--apiserver--64c69bdd46--l589x-eth0" Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.717 [INFO][4761] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:35:34.721336 env[1206]: 2025-03-17 18:35:34.718 [INFO][4733] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92" Mar 17 18:35:34.722124 env[1206]: time="2025-03-17T18:35:34.722039768Z" level=info msg="TearDown network for sandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\" successfully" Mar 17 18:35:34.726351 env[1206]: time="2025-03-17T18:35:34.726315760Z" level=info msg="RemovePodSandbox \"242bd8744dcbb0b66ebbf07de452ef9fcbc7ad1926f50a06b1019739cc9eca92\" returns successfully" Mar 17 18:35:35.026000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:35.026000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00098d260 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:35:35.026000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:35:35.027000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:35.027000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001077da0 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:35:35.027000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:35:35.027000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:35.027000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00248bfc0 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:35:35.027000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:35:35.027000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7298 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:35:35.027000 audit[1829]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000fae000 a2=fc6 a3=0 items=0 ppid=1653 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c992 key=(null) Mar 17 18:35:35.027000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:35:35.601325 systemd[1]: run-containerd-runc-k8s.io-95b07f6e0474ab54219b2111c2392ccbc46b13e3b250e15a926e223583326aa2-runc.XAgs48.mount: Deactivated successfully. Mar 17 18:35:35.730789 kubelet[1968]: I0317 18:35:35.730713 1968 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Mar 17 18:35:35.730789 kubelet[1968]: I0317 18:35:35.730787 1968 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Mar 17 18:35:38.938063 systemd[1]: Started sshd@15-10.0.0.17:22-10.0.0.1:50298.service. Mar 17 18:35:38.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.17:22-10.0.0.1:50298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:38.939449 kernel: kauditd_printk_skb: 65 callbacks suppressed Mar 17 18:35:38.939690 kernel: audit: type=1130 audit(1742236538.938:1422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.17:22-10.0.0.1:50298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:38.985000 audit[4785]: USER_ACCT pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:38.986170 sshd[4785]: Accepted publickey for core from 10.0.0.1 port 50298 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:38.988736 sshd[4785]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:38.988000 audit[4785]: CRED_ACQ pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:38.995658 kernel: audit: type=1101 audit(1742236538.985:1423): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:38.995753 kernel: audit: type=1103 audit(1742236538.988:1424): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:38.998717 kernel: audit: type=1006 audit(1742236538.988:1425): pid=4785 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Mar 17 18:35:38.997280 systemd[1]: Started session-16.scope. Mar 17 18:35:38.997750 systemd-logind[1191]: New session 16 of user core. Mar 17 18:35:38.988000 audit[4785]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce6d02160 a2=3 a3=0 items=0 ppid=1 pid=4785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:38.988000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:39.006044 kernel: audit: type=1300 audit(1742236538.988:1425): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce6d02160 a2=3 a3=0 items=0 ppid=1 pid=4785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:39.006161 kernel: audit: type=1327 audit(1742236538.988:1425): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:39.006192 kernel: audit: type=1105 audit(1742236539.003:1426): pid=4785 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.003000 audit[4785]: USER_START pid=4785 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.005000 audit[4787]: CRED_ACQ pid=4787 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.014264 kernel: audit: type=1103 audit(1742236539.005:1427): pid=4787 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.167650 sshd[4785]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:39.168000 audit[4785]: USER_END pid=4785 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.170215 systemd[1]: sshd@15-10.0.0.17:22-10.0.0.1:50298.service: Deactivated successfully. Mar 17 18:35:39.170986 systemd[1]: session-16.scope: Deactivated successfully. Mar 17 18:35:39.171469 systemd-logind[1191]: Session 16 logged out. Waiting for processes to exit. Mar 17 18:35:39.172175 systemd-logind[1191]: Removed session 16. Mar 17 18:35:39.168000 audit[4785]: CRED_DISP pid=4785 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.178199 kernel: audit: type=1106 audit(1742236539.168:1428): pid=4785 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.178274 kernel: audit: type=1104 audit(1742236539.168:1429): pid=4785 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:39.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.17:22-10.0.0.1:50298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:44.176840 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:35:44.177017 kernel: audit: type=1130 audit(1742236544.170:1431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.17:22-10.0.0.1:50314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:44.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.17:22-10.0.0.1:50314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:44.171834 systemd[1]: Started sshd@16-10.0.0.17:22-10.0.0.1:50314.service. Mar 17 18:35:44.210000 audit[4805]: USER_ACCT pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.212000 sshd[4805]: Accepted publickey for core from 10.0.0.1 port 50314 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:44.214000 audit[4805]: CRED_ACQ pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.216346 sshd[4805]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:44.219635 kernel: audit: type=1101 audit(1742236544.210:1432): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.219727 kernel: audit: type=1103 audit(1742236544.214:1433): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.219757 kernel: audit: type=1006 audit(1742236544.214:1434): pid=4805 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Mar 17 18:35:44.220577 systemd-logind[1191]: New session 17 of user core. Mar 17 18:35:44.221308 systemd[1]: Started session-17.scope. Mar 17 18:35:44.221952 kernel: audit: type=1300 audit(1742236544.214:1434): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff26a7c9c0 a2=3 a3=0 items=0 ppid=1 pid=4805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:44.214000 audit[4805]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff26a7c9c0 a2=3 a3=0 items=0 ppid=1 pid=4805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:44.214000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:44.227215 kernel: audit: type=1327 audit(1742236544.214:1434): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:44.226000 audit[4805]: USER_START pid=4805 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.232279 kernel: audit: type=1105 audit(1742236544.226:1435): pid=4805 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.232383 kernel: audit: type=1103 audit(1742236544.228:1436): pid=4807 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.228000 audit[4807]: CRED_ACQ pid=4807 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.385447 sshd[4805]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:44.385000 audit[4805]: USER_END pid=4805 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.388215 systemd[1]: sshd@16-10.0.0.17:22-10.0.0.1:50314.service: Deactivated successfully. Mar 17 18:35:44.389039 systemd[1]: session-17.scope: Deactivated successfully. Mar 17 18:35:44.389860 systemd-logind[1191]: Session 17 logged out. Waiting for processes to exit. Mar 17 18:35:44.390545 systemd-logind[1191]: Removed session 17. Mar 17 18:35:44.385000 audit[4805]: CRED_DISP pid=4805 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.395580 kernel: audit: type=1106 audit(1742236544.385:1437): pid=4805 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.395658 kernel: audit: type=1104 audit(1742236544.385:1438): pid=4805 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:44.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.17:22-10.0.0.1:50314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:48.071446 kubelet[1968]: I0317 18:35:48.071395 1968 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:35:48.086545 kubelet[1968]: I0317 18:35:48.086475 1968 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-4wbdt" podStartSLOduration=44.673813066 podStartE2EDuration="57.08645501s" podCreationTimestamp="2025-03-17 18:34:51 +0000 UTC" firstStartedPulling="2025-03-17 18:35:22.158821147 +0000 UTC m=+49.830485177" lastFinishedPulling="2025-03-17 18:35:34.571463081 +0000 UTC m=+62.243127121" observedRunningTime="2025-03-17 18:35:35.460473627 +0000 UTC m=+63.132137668" watchObservedRunningTime="2025-03-17 18:35:48.08645501 +0000 UTC m=+75.758119050" Mar 17 18:35:48.097000 audit[4819]: NETFILTER_CFG table=filter:123 family=2 entries=8 op=nft_register_rule pid=4819 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:48.097000 audit[4819]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdcc8654d0 a2=0 a3=7ffdcc8654bc items=0 ppid=2118 pid=4819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:48.097000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:48.103000 audit[4819]: NETFILTER_CFG table=nat:124 family=2 entries=34 op=nft_register_chain pid=4819 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:48.103000 audit[4819]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffdcc8654d0 a2=0 a3=7ffdcc8654bc items=0 ppid=2118 pid=4819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:48.103000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:48.346169 systemd[1]: run-containerd-runc-k8s.io-0653c314849bf2a1709312f98cd70a37d4e0db2fd5e4335b1b1d1d4822baf02f-runc.64VztN.mount: Deactivated successfully. Mar 17 18:35:48.386258 kubelet[1968]: E0317 18:35:48.386222 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:49.389246 systemd[1]: Started sshd@17-10.0.0.17:22-10.0.0.1:33712.service. Mar 17 18:35:49.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.17:22-10.0.0.1:33712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:49.390703 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:35:49.390816 kernel: audit: type=1130 audit(1742236549.388:1442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.17:22-10.0.0.1:33712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:49.427000 audit[4844]: USER_ACCT pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.428545 sshd[4844]: Accepted publickey for core from 10.0.0.1 port 33712 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:49.431000 audit[4844]: CRED_ACQ pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.432632 sshd[4844]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:49.435940 kernel: audit: type=1101 audit(1742236549.427:1443): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.435988 kernel: audit: type=1103 audit(1742236549.431:1444): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.436005 kernel: audit: type=1006 audit(1742236549.431:1445): pid=4844 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Mar 17 18:35:49.435649 systemd-logind[1191]: New session 18 of user core. Mar 17 18:35:49.436397 systemd[1]: Started session-18.scope. Mar 17 18:35:49.431000 audit[4844]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffaf0daed0 a2=3 a3=0 items=0 ppid=1 pid=4844 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:49.442228 kernel: audit: type=1300 audit(1742236549.431:1445): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffaf0daed0 a2=3 a3=0 items=0 ppid=1 pid=4844 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:49.442272 kernel: audit: type=1327 audit(1742236549.431:1445): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:49.431000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:49.443540 kernel: audit: type=1105 audit(1742236549.439:1446): pid=4844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.439000 audit[4844]: USER_START pid=4844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.447832 kernel: audit: type=1103 audit(1742236549.440:1447): pid=4846 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.440000 audit[4846]: CRED_ACQ pid=4846 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.603785 sshd[4844]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:49.603000 audit[4844]: USER_END pid=4844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.607267 systemd[1]: sshd@17-10.0.0.17:22-10.0.0.1:33712.service: Deactivated successfully. Mar 17 18:35:49.607882 systemd[1]: session-18.scope: Deactivated successfully. Mar 17 18:35:49.613012 kernel: audit: type=1106 audit(1742236549.603:1448): pid=4844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.613062 kernel: audit: type=1104 audit(1742236549.603:1449): pid=4844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.603000 audit[4844]: CRED_DISP pid=4844 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.17:22-10.0.0.1:33712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:49.608931 systemd-logind[1191]: Session 18 logged out. Waiting for processes to exit. Mar 17 18:35:49.613596 systemd[1]: Started sshd@18-10.0.0.17:22-10.0.0.1:33714.service. Mar 17 18:35:49.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.17:22-10.0.0.1:33714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:49.614318 systemd-logind[1191]: Removed session 18. Mar 17 18:35:49.648000 audit[4858]: USER_ACCT pid=4858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.649634 sshd[4858]: Accepted publickey for core from 10.0.0.1 port 33714 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:49.649000 audit[4858]: CRED_ACQ pid=4858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.649000 audit[4858]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4bf019f0 a2=3 a3=0 items=0 ppid=1 pid=4858 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:49.649000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:49.651244 sshd[4858]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:49.658877 systemd[1]: Started session-19.scope. Mar 17 18:35:49.659416 systemd-logind[1191]: New session 19 of user core. Mar 17 18:35:49.663000 audit[4858]: USER_START pid=4858 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:49.665000 audit[4877]: CRED_ACQ pid=4877 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:50.323404 sshd[4858]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:50.323000 audit[4858]: USER_END pid=4858 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:50.323000 audit[4858]: CRED_DISP pid=4858 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:50.327563 systemd[1]: Started sshd@19-10.0.0.17:22-10.0.0.1:33718.service. Mar 17 18:35:50.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.17:22-10.0.0.1:33718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:50.328173 systemd[1]: sshd@18-10.0.0.17:22-10.0.0.1:33714.service: Deactivated successfully. Mar 17 18:35:50.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.17:22-10.0.0.1:33714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:50.328757 systemd[1]: session-19.scope: Deactivated successfully. Mar 17 18:35:50.329374 systemd-logind[1191]: Session 19 logged out. Waiting for processes to exit. Mar 17 18:35:50.330116 systemd-logind[1191]: Removed session 19. Mar 17 18:35:50.364000 audit[4890]: USER_ACCT pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:50.366311 sshd[4890]: Accepted publickey for core from 10.0.0.1 port 33718 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:50.365000 audit[4890]: CRED_ACQ pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:50.365000 audit[4890]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc096ab610 a2=3 a3=0 items=0 ppid=1 pid=4890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:50.365000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:50.366910 sshd[4890]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:50.370182 systemd-logind[1191]: New session 20 of user core. Mar 17 18:35:50.370955 systemd[1]: Started session-20.scope. Mar 17 18:35:50.373000 audit[4890]: USER_START pid=4890 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:50.375000 audit[4893]: CRED_ACQ pid=4893 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.237000 audit[4904]: NETFILTER_CFG table=filter:125 family=2 entries=20 op=nft_register_rule pid=4904 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:51.237000 audit[4904]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffeeef11140 a2=0 a3=7ffeeef1112c items=0 ppid=2118 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:51.237000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:51.242000 audit[4904]: NETFILTER_CFG table=nat:126 family=2 entries=22 op=nft_register_rule pid=4904 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:51.242000 audit[4904]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffeeef11140 a2=0 a3=0 items=0 ppid=2118 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:51.242000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:51.253545 sshd[4890]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:51.256977 systemd[1]: Started sshd@20-10.0.0.17:22-10.0.0.1:33720.service. Mar 17 18:35:51.257000 audit[4908]: NETFILTER_CFG table=filter:127 family=2 entries=32 op=nft_register_rule pid=4908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:51.257000 audit[4908]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe2e83f320 a2=0 a3=7ffe2e83f30c items=0 ppid=2118 pid=4908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:51.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:51.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.17:22-10.0.0.1:33720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:51.258000 audit[4890]: USER_END pid=4890 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.258000 audit[4890]: CRED_DISP pid=4890 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.17:22-10.0.0.1:33718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:51.260878 systemd[1]: sshd@19-10.0.0.17:22-10.0.0.1:33718.service: Deactivated successfully. Mar 17 18:35:51.261658 systemd[1]: session-20.scope: Deactivated successfully. Mar 17 18:35:51.262631 systemd-logind[1191]: Session 20 logged out. Waiting for processes to exit. Mar 17 18:35:51.263664 systemd-logind[1191]: Removed session 20. Mar 17 18:35:51.266000 audit[4908]: NETFILTER_CFG table=nat:128 family=2 entries=22 op=nft_register_rule pid=4908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:51.266000 audit[4908]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe2e83f320 a2=0 a3=0 items=0 ppid=2118 pid=4908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:51.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:51.292000 audit[4907]: USER_ACCT pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.294235 sshd[4907]: Accepted publickey for core from 10.0.0.1 port 33720 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:51.293000 audit[4907]: CRED_ACQ pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.294000 audit[4907]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffecacb0d90 a2=3 a3=0 items=0 ppid=1 pid=4907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:51.294000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:51.295427 sshd[4907]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:51.299816 systemd[1]: Started session-21.scope. Mar 17 18:35:51.300283 systemd-logind[1191]: New session 21 of user core. Mar 17 18:35:51.304000 audit[4907]: USER_START pid=4907 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.305000 audit[4911]: CRED_ACQ pid=4911 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.614494 sshd[4907]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:51.618471 systemd[1]: Started sshd@21-10.0.0.17:22-10.0.0.1:33734.service. Mar 17 18:35:51.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.17:22-10.0.0.1:33734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:51.618000 audit[4907]: USER_END pid=4907 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.618000 audit[4907]: CRED_DISP pid=4907 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.17:22-10.0.0.1:33720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:51.620736 systemd[1]: sshd@20-10.0.0.17:22-10.0.0.1:33720.service: Deactivated successfully. Mar 17 18:35:51.621542 systemd[1]: session-21.scope: Deactivated successfully. Mar 17 18:35:51.622407 systemd-logind[1191]: Session 21 logged out. Waiting for processes to exit. Mar 17 18:35:51.623046 systemd-logind[1191]: Removed session 21. Mar 17 18:35:51.656000 audit[4919]: USER_ACCT pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.657490 sshd[4919]: Accepted publickey for core from 10.0.0.1 port 33734 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:51.657000 audit[4919]: CRED_ACQ pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.657000 audit[4919]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1e949360 a2=3 a3=0 items=0 ppid=1 pid=4919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:51.657000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:51.659013 sshd[4919]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:51.662387 systemd-logind[1191]: New session 22 of user core. Mar 17 18:35:51.663129 systemd[1]: Started session-22.scope. Mar 17 18:35:51.665000 audit[4919]: USER_START pid=4919 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.666000 audit[4922]: CRED_ACQ pid=4922 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.782662 sshd[4919]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:51.782000 audit[4919]: USER_END pid=4919 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.782000 audit[4919]: CRED_DISP pid=4919 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:51.784973 systemd[1]: sshd@21-10.0.0.17:22-10.0.0.1:33734.service: Deactivated successfully. Mar 17 18:35:51.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.17:22-10.0.0.1:33734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:51.785755 systemd[1]: session-22.scope: Deactivated successfully. Mar 17 18:35:51.786246 systemd-logind[1191]: Session 22 logged out. Waiting for processes to exit. Mar 17 18:35:51.786982 systemd-logind[1191]: Removed session 22. Mar 17 18:35:52.421311 kubelet[1968]: E0317 18:35:52.421261 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:35:56.787143 systemd[1]: Started sshd@22-10.0.0.17:22-10.0.0.1:39106.service. Mar 17 18:35:56.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.17:22-10.0.0.1:39106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:56.789121 kernel: kauditd_printk_skb: 57 callbacks suppressed Mar 17 18:35:56.789246 kernel: audit: type=1130 audit(1742236556.786:1491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.17:22-10.0.0.1:39106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:56.829000 audit[4956]: USER_ACCT pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.830897 sshd[4956]: Accepted publickey for core from 10.0.0.1 port 39106 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:35:56.833000 audit[4956]: CRED_ACQ pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.835162 sshd[4956]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:35:56.838413 kernel: audit: type=1101 audit(1742236556.829:1492): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.838461 kernel: audit: type=1103 audit(1742236556.833:1493): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.838477 kernel: audit: type=1006 audit(1742236556.833:1494): pid=4956 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Mar 17 18:35:56.841297 kernel: audit: type=1300 audit(1742236556.833:1494): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf6a21520 a2=3 a3=0 items=0 ppid=1 pid=4956 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:56.833000 audit[4956]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf6a21520 a2=3 a3=0 items=0 ppid=1 pid=4956 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:56.840089 systemd[1]: Started session-23.scope. Mar 17 18:35:56.840686 systemd-logind[1191]: New session 23 of user core. Mar 17 18:35:56.833000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:56.846206 kernel: audit: type=1327 audit(1742236556.833:1494): proctitle=737368643A20636F7265205B707269765D Mar 17 18:35:56.850000 audit[4956]: USER_START pid=4956 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.851000 audit[4958]: CRED_ACQ pid=4958 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.887499 kernel: audit: type=1105 audit(1742236556.850:1495): pid=4956 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.887548 kernel: audit: type=1103 audit(1742236556.851:1496): pid=4958 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.991037 sshd[4956]: pam_unix(sshd:session): session closed for user core Mar 17 18:35:56.990000 audit[4956]: USER_END pid=4956 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.993381 systemd[1]: sshd@22-10.0.0.17:22-10.0.0.1:39106.service: Deactivated successfully. Mar 17 18:35:56.994042 systemd[1]: session-23.scope: Deactivated successfully. Mar 17 18:35:56.994609 systemd-logind[1191]: Session 23 logged out. Waiting for processes to exit. Mar 17 18:35:56.995313 systemd-logind[1191]: Removed session 23. Mar 17 18:35:56.990000 audit[4956]: CRED_DISP pid=4956 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.999799 kernel: audit: type=1106 audit(1742236556.990:1497): pid=4956 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.999848 kernel: audit: type=1104 audit(1742236556.990:1498): pid=4956 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:35:56.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.17:22-10.0.0.1:39106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:35:59.092000 audit[4976]: NETFILTER_CFG table=filter:129 family=2 entries=20 op=nft_register_rule pid=4976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:59.092000 audit[4976]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc75d14b10 a2=0 a3=7ffc75d14afc items=0 ppid=2118 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:59.092000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:35:59.099000 audit[4976]: NETFILTER_CFG table=nat:130 family=2 entries=106 op=nft_register_chain pid=4976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:35:59.099000 audit[4976]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffc75d14b10 a2=0 a3=7ffc75d14afc items=0 ppid=2118 pid=4976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:35:59.099000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:36:01.995842 systemd[1]: Started sshd@23-10.0.0.17:22-10.0.0.1:39114.service. Mar 17 18:36:01.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.17:22-10.0.0.1:39114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:01.996856 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:36:01.996909 kernel: audit: type=1130 audit(1742236561.994:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.17:22-10.0.0.1:39114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:02.032000 audit[4978]: USER_ACCT pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.034242 sshd[4978]: Accepted publickey for core from 10.0.0.1 port 39114 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:36:02.037655 sshd[4978]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:36:02.036000 audit[4978]: CRED_ACQ pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.042096 kernel: audit: type=1101 audit(1742236562.032:1503): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.042147 kernel: audit: type=1103 audit(1742236562.036:1504): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.042180 kernel: audit: type=1006 audit(1742236562.036:1505): pid=4978 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Mar 17 18:36:02.041153 systemd-logind[1191]: New session 24 of user core. Mar 17 18:36:02.041967 systemd[1]: Started session-24.scope. Mar 17 18:36:02.048427 kernel: audit: type=1300 audit(1742236562.036:1505): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6e7b81e0 a2=3 a3=0 items=0 ppid=1 pid=4978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:36:02.036000 audit[4978]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6e7b81e0 a2=3 a3=0 items=0 ppid=1 pid=4978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:36:02.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:36:02.050063 kernel: audit: type=1327 audit(1742236562.036:1505): proctitle=737368643A20636F7265205B707269765D Mar 17 18:36:02.050144 kernel: audit: type=1105 audit(1742236562.045:1506): pid=4978 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.045000 audit[4978]: USER_START pid=4978 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.046000 audit[4980]: CRED_ACQ pid=4980 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.057595 kernel: audit: type=1103 audit(1742236562.046:1507): pid=4980 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.160322 sshd[4978]: pam_unix(sshd:session): session closed for user core Mar 17 18:36:02.160000 audit[4978]: USER_END pid=4978 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.162428 systemd[1]: sshd@23-10.0.0.17:22-10.0.0.1:39114.service: Deactivated successfully. Mar 17 18:36:02.163191 systemd[1]: session-24.scope: Deactivated successfully. Mar 17 18:36:02.163798 systemd-logind[1191]: Session 24 logged out. Waiting for processes to exit. Mar 17 18:36:02.164708 systemd-logind[1191]: Removed session 24. Mar 17 18:36:02.160000 audit[4978]: CRED_DISP pid=4978 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.169764 kernel: audit: type=1106 audit(1742236562.160:1508): pid=4978 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.169821 kernel: audit: type=1104 audit(1742236562.160:1509): pid=4978 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:02.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.17:22-10.0.0.1:39114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:02.421004 kubelet[1968]: E0317 18:36:02.420951 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:36:06.421066 kubelet[1968]: E0317 18:36:06.421020 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:36:07.164736 systemd[1]: Started sshd@24-10.0.0.17:22-10.0.0.1:36806.service. Mar 17 18:36:07.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.17:22-10.0.0.1:36806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:07.165821 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:36:07.165941 kernel: audit: type=1130 audit(1742236567.163:1511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.17:22-10.0.0.1:36806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:07.204000 audit[4993]: USER_ACCT pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.206219 sshd[4993]: Accepted publickey for core from 10.0.0.1 port 36806 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:36:07.209352 sshd[4993]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:36:07.207000 audit[4993]: CRED_ACQ pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.213044 systemd-logind[1191]: New session 25 of user core. Mar 17 18:36:07.213851 systemd[1]: Started session-25.scope. Mar 17 18:36:07.214678 kernel: audit: type=1101 audit(1742236567.204:1512): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.214731 kernel: audit: type=1103 audit(1742236567.207:1513): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.214756 kernel: audit: type=1006 audit(1742236567.207:1514): pid=4993 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Mar 17 18:36:07.207000 audit[4993]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc937e2af0 a2=3 a3=0 items=0 ppid=1 pid=4993 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:36:07.221461 kernel: audit: type=1300 audit(1742236567.207:1514): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc937e2af0 a2=3 a3=0 items=0 ppid=1 pid=4993 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:36:07.221511 kernel: audit: type=1327 audit(1742236567.207:1514): proctitle=737368643A20636F7265205B707269765D Mar 17 18:36:07.207000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:36:07.222896 kernel: audit: type=1105 audit(1742236567.216:1515): pid=4993 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.216000 audit[4993]: USER_START pid=4993 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.217000 audit[4995]: CRED_ACQ pid=4995 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.230546 kernel: audit: type=1103 audit(1742236567.217:1516): pid=4995 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.321194 sshd[4993]: pam_unix(sshd:session): session closed for user core Mar 17 18:36:07.321000 audit[4993]: USER_END pid=4993 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.323617 systemd[1]: sshd@24-10.0.0.17:22-10.0.0.1:36806.service: Deactivated successfully. Mar 17 18:36:07.324302 systemd[1]: session-25.scope: Deactivated successfully. Mar 17 18:36:07.324791 systemd-logind[1191]: Session 25 logged out. Waiting for processes to exit. Mar 17 18:36:07.325544 systemd-logind[1191]: Removed session 25. Mar 17 18:36:07.321000 audit[4993]: CRED_DISP pid=4993 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.329916 kernel: audit: type=1106 audit(1742236567.321:1517): pid=4993 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.329964 kernel: audit: type=1104 audit(1742236567.321:1518): pid=4993 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:07.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.17:22-10.0.0.1:36806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:08.421391 kubelet[1968]: E0317 18:36:08.421339 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Mar 17 18:36:12.325668 systemd[1]: Started sshd@25-10.0.0.17:22-10.0.0.1:36812.service. Mar 17 18:36:12.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.17:22-10.0.0.1:36812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:12.327119 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:36:12.327200 kernel: audit: type=1130 audit(1742236572.324:1520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.17:22-10.0.0.1:36812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:12.368000 audit[5008]: USER_ACCT pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.369666 sshd[5008]: Accepted publickey for core from 10.0.0.1 port 36812 ssh2: RSA SHA256:EcJpbXadXymLrINQtrmLSqTXC2wy0UoSwO9MmZb5CTo Mar 17 18:36:12.371782 sshd[5008]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:36:12.370000 audit[5008]: CRED_ACQ pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.378345 kernel: audit: type=1101 audit(1742236572.368:1521): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.378744 kernel: audit: type=1103 audit(1742236572.370:1522): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.379068 kernel: audit: type=1006 audit(1742236572.370:1523): pid=5008 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Mar 17 18:36:12.377931 systemd-logind[1191]: New session 26 of user core. Mar 17 18:36:12.378061 systemd[1]: Started session-26.scope. Mar 17 18:36:12.370000 audit[5008]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8b769490 a2=3 a3=0 items=0 ppid=1 pid=5008 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:36:12.384748 kernel: audit: type=1300 audit(1742236572.370:1523): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8b769490 a2=3 a3=0 items=0 ppid=1 pid=5008 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:36:12.384824 kernel: audit: type=1327 audit(1742236572.370:1523): proctitle=737368643A20636F7265205B707269765D Mar 17 18:36:12.370000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:36:12.381000 audit[5008]: USER_START pid=5008 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.390572 kernel: audit: type=1105 audit(1742236572.381:1524): pid=5008 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.390618 kernel: audit: type=1103 audit(1742236572.382:1525): pid=5010 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.382000 audit[5010]: CRED_ACQ pid=5010 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.537011 sshd[5008]: pam_unix(sshd:session): session closed for user core Mar 17 18:36:12.537000 audit[5008]: USER_END pid=5008 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.539559 systemd[1]: sshd@25-10.0.0.17:22-10.0.0.1:36812.service: Deactivated successfully. Mar 17 18:36:12.540217 systemd[1]: session-26.scope: Deactivated successfully. Mar 17 18:36:12.540937 systemd-logind[1191]: Session 26 logged out. Waiting for processes to exit. Mar 17 18:36:12.541783 systemd-logind[1191]: Removed session 26. Mar 17 18:36:12.537000 audit[5008]: CRED_DISP pid=5008 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.546795 kernel: audit: type=1106 audit(1742236572.537:1526): pid=5008 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.546846 kernel: audit: type=1104 audit(1742236572.537:1527): pid=5008 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Mar 17 18:36:12.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.17:22-10.0.0.1:36812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:36:13.421103 kubelet[1968]: E0317 18:36:13.421049 1968 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"