Mar 17 18:18:22.976672 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Mar 17 18:18:22.976709 kernel: Linux version 5.15.179-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Mar 17 17:11:44 -00 2025 Mar 17 18:18:22.976732 kernel: efi: EFI v2.70 by EDK II Mar 17 18:18:22.976747 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7b003a98 MEMRESERVE=0x7171cf98 Mar 17 18:18:22.976761 kernel: ACPI: Early table checksum verification disabled Mar 17 18:18:22.976774 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Mar 17 18:18:22.976790 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Mar 17 18:18:22.976804 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Mar 17 18:18:22.976819 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Mar 17 18:18:22.976832 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Mar 17 18:18:22.976851 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Mar 17 18:18:22.976865 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Mar 17 18:18:22.976878 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Mar 17 18:18:22.976892 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Mar 17 18:18:22.976909 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Mar 17 18:18:22.976928 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Mar 17 18:18:22.976943 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Mar 17 18:18:22.976958 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Mar 17 18:18:22.976972 kernel: printk: bootconsole [uart0] enabled Mar 17 18:18:22.976986 kernel: NUMA: Failed to initialise from firmware Mar 17 18:18:22.977001 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Mar 17 18:18:22.977016 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Mar 17 18:18:22.977031 kernel: Zone ranges: Mar 17 18:18:22.977046 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Mar 17 18:18:22.977061 kernel: DMA32 empty Mar 17 18:18:22.977075 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Mar 17 18:18:22.977093 kernel: Movable zone start for each node Mar 17 18:18:22.977108 kernel: Early memory node ranges Mar 17 18:18:22.977123 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Mar 17 18:18:22.977137 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Mar 17 18:18:22.977151 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Mar 17 18:18:22.977166 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Mar 17 18:18:22.977180 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Mar 17 18:18:22.977195 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Mar 17 18:18:22.977289 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Mar 17 18:18:22.977307 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Mar 17 18:18:22.977322 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Mar 17 18:18:22.977337 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Mar 17 18:18:22.977359 kernel: psci: probing for conduit method from ACPI. Mar 17 18:18:22.977374 kernel: psci: PSCIv1.0 detected in firmware. Mar 17 18:18:22.977395 kernel: psci: Using standard PSCI v0.2 function IDs Mar 17 18:18:22.977412 kernel: psci: Trusted OS migration not required Mar 17 18:18:22.977427 kernel: psci: SMC Calling Convention v1.1 Mar 17 18:18:22.977447 kernel: ACPI: SRAT not present Mar 17 18:18:22.977463 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Mar 17 18:18:22.977478 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Mar 17 18:18:22.977494 kernel: pcpu-alloc: [0] 0 [0] 1 Mar 17 18:18:22.977510 kernel: Detected PIPT I-cache on CPU0 Mar 17 18:18:22.977525 kernel: CPU features: detected: GIC system register CPU interface Mar 17 18:18:22.977541 kernel: CPU features: detected: Spectre-v2 Mar 17 18:18:22.977556 kernel: CPU features: detected: Spectre-v3a Mar 17 18:18:22.977571 kernel: CPU features: detected: Spectre-BHB Mar 17 18:18:22.977587 kernel: CPU features: kernel page table isolation forced ON by KASLR Mar 17 18:18:22.977602 kernel: CPU features: detected: Kernel page table isolation (KPTI) Mar 17 18:18:22.977621 kernel: CPU features: detected: ARM erratum 1742098 Mar 17 18:18:22.977636 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Mar 17 18:18:22.977651 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Mar 17 18:18:22.977667 kernel: Policy zone: Normal Mar 17 18:18:22.977685 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=e034db32d58fe7496a3db6ba3879dd9052cea2cf1597d65edfc7b26afc92530d Mar 17 18:18:22.977701 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Mar 17 18:18:22.977716 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Mar 17 18:18:22.977732 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Mar 17 18:18:22.977747 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Mar 17 18:18:22.977763 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Mar 17 18:18:22.977783 kernel: Memory: 3824524K/4030464K available (9792K kernel code, 2094K rwdata, 7584K rodata, 36416K init, 777K bss, 205940K reserved, 0K cma-reserved) Mar 17 18:18:22.977800 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Mar 17 18:18:22.977815 kernel: trace event string verifier disabled Mar 17 18:18:22.977830 kernel: rcu: Preemptible hierarchical RCU implementation. Mar 17 18:18:22.977846 kernel: rcu: RCU event tracing is enabled. Mar 17 18:18:22.977862 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Mar 17 18:18:22.977878 kernel: Trampoline variant of Tasks RCU enabled. Mar 17 18:18:22.977894 kernel: Tracing variant of Tasks RCU enabled. Mar 17 18:18:22.977909 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Mar 17 18:18:22.977924 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Mar 17 18:18:22.977940 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Mar 17 18:18:22.977955 kernel: GICv3: 96 SPIs implemented Mar 17 18:18:22.977974 kernel: GICv3: 0 Extended SPIs implemented Mar 17 18:18:22.977990 kernel: GICv3: Distributor has no Range Selector support Mar 17 18:18:22.978005 kernel: Root IRQ handler: gic_handle_irq Mar 17 18:18:22.978020 kernel: GICv3: 16 PPIs implemented Mar 17 18:18:22.978036 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Mar 17 18:18:22.978051 kernel: ACPI: SRAT not present Mar 17 18:18:22.978065 kernel: ITS [mem 0x10080000-0x1009ffff] Mar 17 18:18:22.978081 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Mar 17 18:18:22.978096 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Mar 17 18:18:22.978112 kernel: GICv3: using LPI property table @0x00000004000b0000 Mar 17 18:18:22.978127 kernel: ITS: Using hypervisor restricted LPI range [128] Mar 17 18:18:22.978146 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Mar 17 18:18:22.978162 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Mar 17 18:18:22.978178 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Mar 17 18:18:22.978193 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Mar 17 18:18:22.978229 kernel: Console: colour dummy device 80x25 Mar 17 18:18:22.978248 kernel: printk: console [tty1] enabled Mar 17 18:18:22.978264 kernel: ACPI: Core revision 20210730 Mar 17 18:18:22.978281 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Mar 17 18:18:22.978297 kernel: pid_max: default: 32768 minimum: 301 Mar 17 18:18:22.978312 kernel: LSM: Security Framework initializing Mar 17 18:18:22.978333 kernel: SELinux: Initializing. Mar 17 18:18:22.978349 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:18:22.978364 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Mar 17 18:18:22.978380 kernel: rcu: Hierarchical SRCU implementation. Mar 17 18:18:22.978396 kernel: Platform MSI: ITS@0x10080000 domain created Mar 17 18:18:22.978411 kernel: PCI/MSI: ITS@0x10080000 domain created Mar 17 18:18:22.978427 kernel: Remapping and enabling EFI services. Mar 17 18:18:22.978442 kernel: smp: Bringing up secondary CPUs ... Mar 17 18:18:22.978458 kernel: Detected PIPT I-cache on CPU1 Mar 17 18:18:22.978477 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Mar 17 18:18:22.978493 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Mar 17 18:18:22.978509 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Mar 17 18:18:22.978524 kernel: smp: Brought up 1 node, 2 CPUs Mar 17 18:18:22.978540 kernel: SMP: Total of 2 processors activated. Mar 17 18:18:22.978556 kernel: CPU features: detected: 32-bit EL0 Support Mar 17 18:18:22.978571 kernel: CPU features: detected: 32-bit EL1 Support Mar 17 18:18:22.978587 kernel: CPU features: detected: CRC32 instructions Mar 17 18:18:22.978602 kernel: CPU: All CPU(s) started at EL1 Mar 17 18:18:22.978618 kernel: alternatives: patching kernel code Mar 17 18:18:22.978637 kernel: devtmpfs: initialized Mar 17 18:18:22.978652 kernel: KASLR disabled due to lack of seed Mar 17 18:18:22.978678 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Mar 17 18:18:22.978698 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Mar 17 18:18:22.978714 kernel: pinctrl core: initialized pinctrl subsystem Mar 17 18:18:22.978730 kernel: SMBIOS 3.0.0 present. Mar 17 18:18:22.978746 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Mar 17 18:18:22.978762 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Mar 17 18:18:22.978779 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Mar 17 18:18:22.978795 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Mar 17 18:18:22.978812 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Mar 17 18:18:22.978832 kernel: audit: initializing netlink subsys (disabled) Mar 17 18:18:22.978848 kernel: audit: type=2000 audit(0.260:1): state=initialized audit_enabled=0 res=1 Mar 17 18:18:22.978864 kernel: thermal_sys: Registered thermal governor 'step_wise' Mar 17 18:18:22.978881 kernel: cpuidle: using governor menu Mar 17 18:18:22.978897 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Mar 17 18:18:22.978917 kernel: ASID allocator initialised with 32768 entries Mar 17 18:18:22.978933 kernel: ACPI: bus type PCI registered Mar 17 18:18:22.978949 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Mar 17 18:18:22.978966 kernel: Serial: AMBA PL011 UART driver Mar 17 18:18:22.978982 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Mar 17 18:18:22.978999 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Mar 17 18:18:22.979015 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Mar 17 18:18:22.979032 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Mar 17 18:18:22.979048 kernel: cryptd: max_cpu_qlen set to 1000 Mar 17 18:18:22.979067 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Mar 17 18:18:22.979084 kernel: ACPI: Added _OSI(Module Device) Mar 17 18:18:22.979100 kernel: ACPI: Added _OSI(Processor Device) Mar 17 18:18:22.979117 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Mar 17 18:18:22.979133 kernel: ACPI: Added _OSI(Processor Aggregator Device) Mar 17 18:18:22.979149 kernel: ACPI: Added _OSI(Linux-Dell-Video) Mar 17 18:18:22.979165 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Mar 17 18:18:22.979181 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Mar 17 18:18:22.979198 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Mar 17 18:18:22.979240 kernel: ACPI: Interpreter enabled Mar 17 18:18:22.979257 kernel: ACPI: Using GIC for interrupt routing Mar 17 18:18:22.979274 kernel: ACPI: MCFG table detected, 1 entries Mar 17 18:18:22.979290 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Mar 17 18:18:22.979574 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Mar 17 18:18:22.979770 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Mar 17 18:18:22.979957 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Mar 17 18:18:22.980141 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Mar 17 18:18:22.980408 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Mar 17 18:18:22.980434 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Mar 17 18:18:22.980451 kernel: acpiphp: Slot [1] registered Mar 17 18:18:22.980467 kernel: acpiphp: Slot [2] registered Mar 17 18:18:22.980484 kernel: acpiphp: Slot [3] registered Mar 17 18:18:22.980500 kernel: acpiphp: Slot [4] registered Mar 17 18:18:22.980533 kernel: acpiphp: Slot [5] registered Mar 17 18:18:22.980552 kernel: acpiphp: Slot [6] registered Mar 17 18:18:22.980568 kernel: acpiphp: Slot [7] registered Mar 17 18:18:22.980590 kernel: acpiphp: Slot [8] registered Mar 17 18:18:22.980607 kernel: acpiphp: Slot [9] registered Mar 17 18:18:22.980623 kernel: acpiphp: Slot [10] registered Mar 17 18:18:22.980639 kernel: acpiphp: Slot [11] registered Mar 17 18:18:22.980656 kernel: acpiphp: Slot [12] registered Mar 17 18:18:22.980672 kernel: acpiphp: Slot [13] registered Mar 17 18:18:22.980688 kernel: acpiphp: Slot [14] registered Mar 17 18:18:22.980704 kernel: acpiphp: Slot [15] registered Mar 17 18:18:22.980723 kernel: acpiphp: Slot [16] registered Mar 17 18:18:22.980744 kernel: acpiphp: Slot [17] registered Mar 17 18:18:22.980761 kernel: acpiphp: Slot [18] registered Mar 17 18:18:22.980777 kernel: acpiphp: Slot [19] registered Mar 17 18:18:22.980793 kernel: acpiphp: Slot [20] registered Mar 17 18:18:22.980809 kernel: acpiphp: Slot [21] registered Mar 17 18:18:22.980826 kernel: acpiphp: Slot [22] registered Mar 17 18:18:22.980842 kernel: acpiphp: Slot [23] registered Mar 17 18:18:22.980858 kernel: acpiphp: Slot [24] registered Mar 17 18:18:22.983286 kernel: acpiphp: Slot [25] registered Mar 17 18:18:22.983321 kernel: acpiphp: Slot [26] registered Mar 17 18:18:22.983347 kernel: acpiphp: Slot [27] registered Mar 17 18:18:22.983364 kernel: acpiphp: Slot [28] registered Mar 17 18:18:22.983380 kernel: acpiphp: Slot [29] registered Mar 17 18:18:22.983397 kernel: acpiphp: Slot [30] registered Mar 17 18:18:22.983414 kernel: acpiphp: Slot [31] registered Mar 17 18:18:22.983430 kernel: PCI host bridge to bus 0000:00 Mar 17 18:18:22.987112 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Mar 17 18:18:22.987367 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Mar 17 18:18:22.987584 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Mar 17 18:18:22.987783 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Mar 17 18:18:22.988027 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Mar 17 18:18:22.988302 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Mar 17 18:18:22.988550 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Mar 17 18:18:22.988806 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Mar 17 18:18:22.989040 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Mar 17 18:18:22.989286 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Mar 17 18:18:22.989530 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Mar 17 18:18:22.989761 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Mar 17 18:18:22.989985 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Mar 17 18:18:22.990227 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Mar 17 18:18:22.990477 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Mar 17 18:18:22.997595 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Mar 17 18:18:22.999311 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Mar 17 18:18:22.999567 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Mar 17 18:18:22.999788 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Mar 17 18:18:23.000019 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Mar 17 18:18:23.000248 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Mar 17 18:18:23.000455 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Mar 17 18:18:23.000689 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Mar 17 18:18:23.000714 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Mar 17 18:18:23.000732 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Mar 17 18:18:23.000749 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Mar 17 18:18:23.000766 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Mar 17 18:18:23.000800 kernel: iommu: Default domain type: Translated Mar 17 18:18:23.000818 kernel: iommu: DMA domain TLB invalidation policy: strict mode Mar 17 18:18:23.000835 kernel: vgaarb: loaded Mar 17 18:18:23.000851 kernel: pps_core: LinuxPPS API ver. 1 registered Mar 17 18:18:23.000873 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Mar 17 18:18:23.000889 kernel: PTP clock support registered Mar 17 18:18:23.000905 kernel: Registered efivars operations Mar 17 18:18:23.000922 kernel: clocksource: Switched to clocksource arch_sys_counter Mar 17 18:18:23.000938 kernel: VFS: Disk quotas dquot_6.6.0 Mar 17 18:18:23.000954 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Mar 17 18:18:23.000970 kernel: pnp: PnP ACPI init Mar 17 18:18:23.001215 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Mar 17 18:18:23.001247 kernel: pnp: PnP ACPI: found 1 devices Mar 17 18:18:23.001264 kernel: NET: Registered PF_INET protocol family Mar 17 18:18:23.001281 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Mar 17 18:18:23.001298 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Mar 17 18:18:23.001315 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Mar 17 18:18:23.001331 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Mar 17 18:18:23.001348 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Mar 17 18:18:23.001365 kernel: TCP: Hash tables configured (established 32768 bind 32768) Mar 17 18:18:23.001381 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:18:23.001402 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Mar 17 18:18:23.001419 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Mar 17 18:18:23.001436 kernel: PCI: CLS 0 bytes, default 64 Mar 17 18:18:23.001453 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Mar 17 18:18:23.001469 kernel: kvm [1]: HYP mode not available Mar 17 18:18:23.001486 kernel: Initialise system trusted keyrings Mar 17 18:18:23.001502 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Mar 17 18:18:23.001519 kernel: Key type asymmetric registered Mar 17 18:18:23.001535 kernel: Asymmetric key parser 'x509' registered Mar 17 18:18:23.001555 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Mar 17 18:18:23.001572 kernel: io scheduler mq-deadline registered Mar 17 18:18:23.001589 kernel: io scheduler kyber registered Mar 17 18:18:23.001606 kernel: io scheduler bfq registered Mar 17 18:18:23.001837 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Mar 17 18:18:23.001862 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Mar 17 18:18:23.001879 kernel: ACPI: button: Power Button [PWRB] Mar 17 18:18:23.001896 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Mar 17 18:18:23.001917 kernel: ACPI: button: Sleep Button [SLPB] Mar 17 18:18:23.001934 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Mar 17 18:18:23.001951 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Mar 17 18:18:23.002174 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Mar 17 18:18:23.002196 kernel: printk: console [ttyS0] disabled Mar 17 18:18:23.002233 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Mar 17 18:18:23.002251 kernel: printk: console [ttyS0] enabled Mar 17 18:18:23.002268 kernel: printk: bootconsole [uart0] disabled Mar 17 18:18:23.002285 kernel: thunder_xcv, ver 1.0 Mar 17 18:18:23.002306 kernel: thunder_bgx, ver 1.0 Mar 17 18:18:23.002323 kernel: nicpf, ver 1.0 Mar 17 18:18:23.002339 kernel: nicvf, ver 1.0 Mar 17 18:18:23.002577 kernel: rtc-efi rtc-efi.0: registered as rtc0 Mar 17 18:18:23.002791 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-03-17T18:18:22 UTC (1742235502) Mar 17 18:18:23.002815 kernel: hid: raw HID events driver (C) Jiri Kosina Mar 17 18:18:23.002831 kernel: NET: Registered PF_INET6 protocol family Mar 17 18:18:23.002848 kernel: Segment Routing with IPv6 Mar 17 18:18:23.002864 kernel: In-situ OAM (IOAM) with IPv6 Mar 17 18:18:23.002886 kernel: NET: Registered PF_PACKET protocol family Mar 17 18:18:23.002902 kernel: Key type dns_resolver registered Mar 17 18:18:23.002918 kernel: registered taskstats version 1 Mar 17 18:18:23.002934 kernel: Loading compiled-in X.509 certificates Mar 17 18:18:23.002951 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.179-flatcar: c6f3fb83dc6bb7052b07ec5b1ef41d12f9b3f7e4' Mar 17 18:18:23.002967 kernel: Key type .fscrypt registered Mar 17 18:18:23.002983 kernel: Key type fscrypt-provisioning registered Mar 17 18:18:23.003000 kernel: ima: No TPM chip found, activating TPM-bypass! Mar 17 18:18:23.003016 kernel: ima: Allocated hash algorithm: sha1 Mar 17 18:18:23.003036 kernel: ima: No architecture policies found Mar 17 18:18:23.003053 kernel: clk: Disabling unused clocks Mar 17 18:18:23.003069 kernel: Freeing unused kernel memory: 36416K Mar 17 18:18:23.003086 kernel: Run /init as init process Mar 17 18:18:23.003102 kernel: with arguments: Mar 17 18:18:23.003118 kernel: /init Mar 17 18:18:23.003135 kernel: with environment: Mar 17 18:18:23.003150 kernel: HOME=/ Mar 17 18:18:23.003166 kernel: TERM=linux Mar 17 18:18:23.003186 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Mar 17 18:18:23.003222 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:18:23.003248 systemd[1]: Detected virtualization amazon. Mar 17 18:18:23.003266 systemd[1]: Detected architecture arm64. Mar 17 18:18:23.003284 systemd[1]: Running in initrd. Mar 17 18:18:23.003301 systemd[1]: No hostname configured, using default hostname. Mar 17 18:18:23.003319 systemd[1]: Hostname set to . Mar 17 18:18:23.003342 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:18:23.003360 systemd[1]: Queued start job for default target initrd.target. Mar 17 18:18:23.003378 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:18:23.003395 systemd[1]: Reached target cryptsetup.target. Mar 17 18:18:23.003413 systemd[1]: Reached target paths.target. Mar 17 18:18:23.003431 systemd[1]: Reached target slices.target. Mar 17 18:18:23.003448 systemd[1]: Reached target swap.target. Mar 17 18:18:23.003465 systemd[1]: Reached target timers.target. Mar 17 18:18:23.003487 systemd[1]: Listening on iscsid.socket. Mar 17 18:18:23.003505 systemd[1]: Listening on iscsiuio.socket. Mar 17 18:18:23.003523 systemd[1]: Listening on systemd-journald-audit.socket. Mar 17 18:18:23.003541 systemd[1]: Listening on systemd-journald-dev-log.socket. Mar 17 18:18:23.003559 systemd[1]: Listening on systemd-journald.socket. Mar 17 18:18:23.003577 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:18:23.003595 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:18:23.003612 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:18:23.003633 systemd[1]: Reached target sockets.target. Mar 17 18:18:23.003651 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:18:23.003669 systemd[1]: Finished network-cleanup.service. Mar 17 18:18:23.003686 systemd[1]: Starting systemd-fsck-usr.service... Mar 17 18:18:23.003704 systemd[1]: Starting systemd-journald.service... Mar 17 18:18:23.003722 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:18:23.003740 systemd[1]: Starting systemd-resolved.service... Mar 17 18:18:23.003757 systemd[1]: Starting systemd-vconsole-setup.service... Mar 17 18:18:23.003775 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:18:23.003798 kernel: audit: type=1130 audit(1742235502.968:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.003816 systemd[1]: Finished systemd-fsck-usr.service. Mar 17 18:18:23.003835 kernel: audit: type=1130 audit(1742235502.982:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.003852 systemd[1]: Finished systemd-vconsole-setup.service. Mar 17 18:18:23.003870 kernel: audit: type=1130 audit(1742235502.996:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.003891 systemd-journald[309]: Journal started Mar 17 18:18:23.003978 systemd-journald[309]: Runtime Journal (/run/log/journal/ec2e068f3487116902ff0bb20ff029c8) is 8.0M, max 75.4M, 67.4M free. Mar 17 18:18:22.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:22.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:22.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:22.966218 systemd-modules-load[310]: Inserted module 'overlay' Mar 17 18:18:23.018521 systemd[1]: Starting dracut-cmdline-ask.service... Mar 17 18:18:23.018588 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:18:23.033275 systemd[1]: Started systemd-journald.service. Mar 17 18:18:23.049629 kernel: audit: type=1130 audit(1742235503.040:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.052318 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:18:23.063374 kernel: audit: type=1130 audit(1742235503.051:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.068762 systemd[1]: Finished dracut-cmdline-ask.service. Mar 17 18:18:23.073021 systemd-resolved[311]: Positive Trust Anchors: Mar 17 18:18:23.090074 kernel: audit: type=1130 audit(1742235503.069:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.090113 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Mar 17 18:18:23.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.081781 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:18:23.081852 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:18:23.083615 systemd[1]: Starting dracut-cmdline.service... Mar 17 18:18:23.112441 kernel: Bridge firewalling registered Mar 17 18:18:23.111611 systemd-modules-load[310]: Inserted module 'br_netfilter' Mar 17 18:18:23.135270 kernel: SCSI subsystem initialized Mar 17 18:18:23.141941 dracut-cmdline[326]: dracut-dracut-053 Mar 17 18:18:23.156104 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Mar 17 18:18:23.156185 kernel: device-mapper: uevent: version 1.0.3 Mar 17 18:18:23.158167 dracut-cmdline[326]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=e034db32d58fe7496a3db6ba3879dd9052cea2cf1597d65edfc7b26afc92530d Mar 17 18:18:23.178036 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Mar 17 18:18:23.177047 systemd-modules-load[310]: Inserted module 'dm_multipath' Mar 17 18:18:23.179144 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:18:23.193853 kernel: audit: type=1130 audit(1742235503.180:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.191225 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:18:23.218920 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:18:23.228483 kernel: audit: type=1130 audit(1742235503.219:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.340249 kernel: Loading iSCSI transport class v2.0-870. Mar 17 18:18:23.362247 kernel: iscsi: registered transport (tcp) Mar 17 18:18:23.388721 kernel: iscsi: registered transport (qla4xxx) Mar 17 18:18:23.388792 kernel: QLogic iSCSI HBA Driver Mar 17 18:18:23.575119 systemd-resolved[311]: Defaulting to hostname 'linux'. Mar 17 18:18:23.576955 kernel: random: crng init done Mar 17 18:18:23.578448 systemd[1]: Started systemd-resolved.service. Mar 17 18:18:23.590596 kernel: audit: type=1130 audit(1742235503.579:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.580395 systemd[1]: Reached target nss-lookup.target. Mar 17 18:18:23.609122 systemd[1]: Finished dracut-cmdline.service. Mar 17 18:18:23.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:23.613374 systemd[1]: Starting dracut-pre-udev.service... Mar 17 18:18:23.682270 kernel: raid6: neonx8 gen() 6355 MB/s Mar 17 18:18:23.700258 kernel: raid6: neonx8 xor() 4781 MB/s Mar 17 18:18:23.718254 kernel: raid6: neonx4 gen() 6370 MB/s Mar 17 18:18:23.736258 kernel: raid6: neonx4 xor() 4978 MB/s Mar 17 18:18:23.754259 kernel: raid6: neonx2 gen() 5657 MB/s Mar 17 18:18:23.772261 kernel: raid6: neonx2 xor() 4557 MB/s Mar 17 18:18:23.790258 kernel: raid6: neonx1 gen() 4401 MB/s Mar 17 18:18:23.808254 kernel: raid6: neonx1 xor() 3688 MB/s Mar 17 18:18:23.826254 kernel: raid6: int64x8 gen() 3395 MB/s Mar 17 18:18:23.844255 kernel: raid6: int64x8 xor() 2088 MB/s Mar 17 18:18:23.862254 kernel: raid6: int64x4 gen() 3757 MB/s Mar 17 18:18:23.880258 kernel: raid6: int64x4 xor() 2189 MB/s Mar 17 18:18:23.898249 kernel: raid6: int64x2 gen() 3528 MB/s Mar 17 18:18:23.916252 kernel: raid6: int64x2 xor() 1950 MB/s Mar 17 18:18:23.934235 kernel: raid6: int64x1 gen() 2743 MB/s Mar 17 18:18:23.953400 kernel: raid6: int64x1 xor() 1441 MB/s Mar 17 18:18:23.953431 kernel: raid6: using algorithm neonx4 gen() 6370 MB/s Mar 17 18:18:23.953455 kernel: raid6: .... xor() 4978 MB/s, rmw enabled Mar 17 18:18:23.955044 kernel: raid6: using neon recovery algorithm Mar 17 18:18:23.973252 kernel: xor: measuring software checksum speed Mar 17 18:18:23.973315 kernel: 8regs : 8735 MB/sec Mar 17 18:18:23.976398 kernel: 32regs : 11144 MB/sec Mar 17 18:18:23.978221 kernel: arm64_neon : 9329 MB/sec Mar 17 18:18:23.978251 kernel: xor: using function: 32regs (11144 MB/sec) Mar 17 18:18:24.071262 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Mar 17 18:18:24.091073 systemd[1]: Finished dracut-pre-udev.service. Mar 17 18:18:24.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:24.094000 audit: BPF prog-id=7 op=LOAD Mar 17 18:18:24.094000 audit: BPF prog-id=8 op=LOAD Mar 17 18:18:24.096365 systemd[1]: Starting systemd-udevd.service... Mar 17 18:18:24.125518 systemd-udevd[509]: Using default interface naming scheme 'v252'. Mar 17 18:18:24.136309 systemd[1]: Started systemd-udevd.service. Mar 17 18:18:24.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:24.140259 systemd[1]: Starting dracut-pre-trigger.service... Mar 17 18:18:24.174729 dracut-pre-trigger[514]: rd.md=0: removing MD RAID activation Mar 17 18:18:24.236124 systemd[1]: Finished dracut-pre-trigger.service. Mar 17 18:18:24.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:24.240584 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:18:24.348300 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:18:24.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:24.463081 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Mar 17 18:18:24.463153 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Mar 17 18:18:24.478122 kernel: ena 0000:00:05.0: ENA device version: 0.10 Mar 17 18:18:24.478393 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Mar 17 18:18:24.478608 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:5d:8c:3a:00:a7 Mar 17 18:18:24.483350 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Mar 17 18:18:24.483412 kernel: nvme nvme0: pci function 0000:00:04.0 Mar 17 18:18:24.483361 (udev-worker)[561]: Network interface NamePolicy= disabled on kernel command line. Mar 17 18:18:24.493251 kernel: nvme nvme0: 2/0/0 default/read/poll queues Mar 17 18:18:24.502744 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Mar 17 18:18:24.502813 kernel: GPT:9289727 != 16777215 Mar 17 18:18:24.502838 kernel: GPT:Alternate GPT header not at the end of the disk. Mar 17 18:18:24.504859 kernel: GPT:9289727 != 16777215 Mar 17 18:18:24.509276 kernel: GPT: Use GNU Parted to correct GPT errors. Mar 17 18:18:24.509349 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Mar 17 18:18:24.588272 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (563) Mar 17 18:18:24.621929 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Mar 17 18:18:24.687602 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:18:24.709129 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Mar 17 18:18:24.715546 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Mar 17 18:18:24.748056 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Mar 17 18:18:24.753644 systemd[1]: Starting disk-uuid.service... Mar 17 18:18:24.765020 disk-uuid[666]: Primary Header is updated. Mar 17 18:18:24.765020 disk-uuid[666]: Secondary Entries is updated. Mar 17 18:18:24.765020 disk-uuid[666]: Secondary Header is updated. Mar 17 18:18:24.774641 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Mar 17 18:18:24.783249 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Mar 17 18:18:25.791258 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Mar 17 18:18:25.792038 disk-uuid[667]: The operation has completed successfully. Mar 17 18:18:25.956710 systemd[1]: disk-uuid.service: Deactivated successfully. Mar 17 18:18:25.958777 systemd[1]: Finished disk-uuid.service. Mar 17 18:18:25.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:25.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:25.989363 systemd[1]: Starting verity-setup.service... Mar 17 18:18:26.024801 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Mar 17 18:18:26.122258 systemd[1]: Found device dev-mapper-usr.device. Mar 17 18:18:26.126807 systemd[1]: Mounting sysusr-usr.mount... Mar 17 18:18:26.129719 systemd[1]: Finished verity-setup.service. Mar 17 18:18:26.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:26.219254 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Mar 17 18:18:26.219862 systemd[1]: Mounted sysusr-usr.mount. Mar 17 18:18:26.222634 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Mar 17 18:18:26.226464 systemd[1]: Starting ignition-setup.service... Mar 17 18:18:26.235525 systemd[1]: Starting parse-ip-for-networkd.service... Mar 17 18:18:26.265149 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Mar 17 18:18:26.265233 kernel: BTRFS info (device nvme0n1p6): using free space tree Mar 17 18:18:26.267483 kernel: BTRFS info (device nvme0n1p6): has skinny extents Mar 17 18:18:26.281446 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Mar 17 18:18:26.300488 systemd[1]: mnt-oem.mount: Deactivated successfully. Mar 17 18:18:26.320791 systemd[1]: Finished ignition-setup.service. Mar 17 18:18:26.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:26.325090 systemd[1]: Starting ignition-fetch-offline.service... Mar 17 18:18:26.411083 systemd[1]: Finished parse-ip-for-networkd.service. Mar 17 18:18:26.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:26.414000 audit: BPF prog-id=9 op=LOAD Mar 17 18:18:26.417160 systemd[1]: Starting systemd-networkd.service... Mar 17 18:18:26.464167 systemd-networkd[1179]: lo: Link UP Mar 17 18:18:26.464194 systemd-networkd[1179]: lo: Gained carrier Mar 17 18:18:26.465947 systemd-networkd[1179]: Enumeration completed Mar 17 18:18:26.466499 systemd-networkd[1179]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:18:26.466683 systemd[1]: Started systemd-networkd.service. Mar 17 18:18:26.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:26.475653 systemd[1]: Reached target network.target. Mar 17 18:18:26.476984 systemd-networkd[1179]: eth0: Link UP Mar 17 18:18:26.477079 systemd-networkd[1179]: eth0: Gained carrier Mar 17 18:18:26.493528 systemd[1]: Starting iscsiuio.service... Mar 17 18:18:26.501320 systemd-networkd[1179]: eth0: DHCPv4 address 172.31.25.97/20, gateway 172.31.16.1 acquired from 172.31.16.1 Mar 17 18:18:26.507557 systemd[1]: Started iscsiuio.service. Mar 17 18:18:26.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:26.511836 systemd[1]: Starting iscsid.service... Mar 17 18:18:26.521345 iscsid[1184]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:18:26.521345 iscsid[1184]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Mar 17 18:18:26.521345 iscsid[1184]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Mar 17 18:18:26.521345 iscsid[1184]: If using hardware iscsi like qla4xxx this message can be ignored. Mar 17 18:18:26.521345 iscsid[1184]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Mar 17 18:18:26.540636 iscsid[1184]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Mar 17 18:18:26.533863 systemd[1]: Started iscsid.service. Mar 17 18:18:26.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:26.547768 systemd[1]: Starting dracut-initqueue.service... Mar 17 18:18:26.575232 systemd[1]: Finished dracut-initqueue.service. Mar 17 18:18:26.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:26.577579 systemd[1]: Reached target remote-fs-pre.target. Mar 17 18:18:26.580024 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:18:26.581761 systemd[1]: Reached target remote-fs.target. Mar 17 18:18:26.585113 systemd[1]: Starting dracut-pre-mount.service... Mar 17 18:18:26.607480 systemd[1]: Finished dracut-pre-mount.service. Mar 17 18:18:26.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.130891 ignition[1119]: Ignition 2.14.0 Mar 17 18:18:27.130921 ignition[1119]: Stage: fetch-offline Mar 17 18:18:27.131291 ignition[1119]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:18:27.131370 ignition[1119]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Mar 17 18:18:27.162650 ignition[1119]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Mar 17 18:18:27.165064 ignition[1119]: Ignition finished successfully Mar 17 18:18:27.167977 systemd[1]: Finished ignition-fetch-offline.service. Mar 17 18:18:27.179941 kernel: kauditd_printk_skb: 18 callbacks suppressed Mar 17 18:18:27.179980 kernel: audit: type=1130 audit(1742235507.168:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.171559 systemd[1]: Starting ignition-fetch.service... Mar 17 18:18:27.190503 ignition[1203]: Ignition 2.14.0 Mar 17 18:18:27.190530 ignition[1203]: Stage: fetch Mar 17 18:18:27.190820 ignition[1203]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:18:27.190877 ignition[1203]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Mar 17 18:18:27.205621 ignition[1203]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Mar 17 18:18:27.207819 ignition[1203]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Mar 17 18:18:27.217718 ignition[1203]: INFO : PUT result: OK Mar 17 18:18:27.221162 ignition[1203]: DEBUG : parsed url from cmdline: "" Mar 17 18:18:27.221162 ignition[1203]: INFO : no config URL provided Mar 17 18:18:27.221162 ignition[1203]: INFO : reading system config file "/usr/lib/ignition/user.ign" Mar 17 18:18:27.226667 ignition[1203]: INFO : no config at "/usr/lib/ignition/user.ign" Mar 17 18:18:27.226667 ignition[1203]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Mar 17 18:18:27.230911 ignition[1203]: INFO : PUT result: OK Mar 17 18:18:27.230911 ignition[1203]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Mar 17 18:18:27.236351 ignition[1203]: INFO : GET result: OK Mar 17 18:18:27.236351 ignition[1203]: DEBUG : parsing config with SHA512: 88f94b9a5e8449787df6e1a088a54962e9af6b65fd3d033281397db55b1c8af85282a03f8480aaf7b111cfb1043b639a48180ccfff5e1b9d030797988805a57f Mar 17 18:18:27.253448 unknown[1203]: fetched base config from "system" Mar 17 18:18:27.255436 unknown[1203]: fetched base config from "system" Mar 17 18:18:27.255469 unknown[1203]: fetched user config from "aws" Mar 17 18:18:27.258171 ignition[1203]: fetch: fetch complete Mar 17 18:18:27.258185 ignition[1203]: fetch: fetch passed Mar 17 18:18:27.258836 ignition[1203]: Ignition finished successfully Mar 17 18:18:27.264089 systemd[1]: Finished ignition-fetch.service. Mar 17 18:18:27.274362 kernel: audit: type=1130 audit(1742235507.264:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.267450 systemd[1]: Starting ignition-kargs.service... Mar 17 18:18:27.288832 ignition[1209]: Ignition 2.14.0 Mar 17 18:18:27.288860 ignition[1209]: Stage: kargs Mar 17 18:18:27.289144 ignition[1209]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:18:27.289195 ignition[1209]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Mar 17 18:18:27.301006 ignition[1209]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Mar 17 18:18:27.303476 ignition[1209]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Mar 17 18:18:27.306983 ignition[1209]: INFO : PUT result: OK Mar 17 18:18:27.312665 ignition[1209]: kargs: kargs passed Mar 17 18:18:27.314160 ignition[1209]: Ignition finished successfully Mar 17 18:18:27.317248 systemd[1]: Finished ignition-kargs.service. Mar 17 18:18:27.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.321559 systemd[1]: Starting ignition-disks.service... Mar 17 18:18:27.329689 kernel: audit: type=1130 audit(1742235507.319:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.336828 ignition[1215]: Ignition 2.14.0 Mar 17 18:18:27.336855 ignition[1215]: Stage: disks Mar 17 18:18:27.337153 ignition[1215]: reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:18:27.337240 ignition[1215]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Mar 17 18:18:27.351682 ignition[1215]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Mar 17 18:18:27.353837 ignition[1215]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Mar 17 18:18:27.357251 ignition[1215]: INFO : PUT result: OK Mar 17 18:18:27.361993 ignition[1215]: disks: disks passed Mar 17 18:18:27.363797 systemd[1]: Finished ignition-disks.service. Mar 17 18:18:27.378905 kernel: audit: type=1130 audit(1742235507.367:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.362082 ignition[1215]: Ignition finished successfully Mar 17 18:18:27.369546 systemd[1]: Reached target initrd-root-device.target. Mar 17 18:18:27.378993 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:18:27.380893 systemd[1]: Reached target local-fs.target. Mar 17 18:18:27.383511 systemd[1]: Reached target sysinit.target. Mar 17 18:18:27.386447 systemd[1]: Reached target basic.target. Mar 17 18:18:27.389311 systemd[1]: Starting systemd-fsck-root.service... Mar 17 18:18:27.432752 systemd-fsck[1223]: ROOT: clean, 623/553520 files, 56021/553472 blocks Mar 17 18:18:27.440113 systemd[1]: Finished systemd-fsck-root.service. Mar 17 18:18:27.452476 kernel: audit: type=1130 audit(1742235507.440:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.449815 systemd[1]: Mounting sysroot.mount... Mar 17 18:18:27.472251 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Mar 17 18:18:27.474338 systemd[1]: Mounted sysroot.mount. Mar 17 18:18:27.474763 systemd[1]: Reached target initrd-root-fs.target. Mar 17 18:18:27.484955 systemd[1]: Mounting sysroot-usr.mount... Mar 17 18:18:27.487130 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Mar 17 18:18:27.487234 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Mar 17 18:18:27.487293 systemd[1]: Reached target ignition-diskful.target. Mar 17 18:18:27.506935 systemd[1]: Mounted sysroot-usr.mount. Mar 17 18:18:27.527780 systemd[1]: Mounting sysroot-usr-share-oem.mount... Mar 17 18:18:27.532573 systemd[1]: Starting initrd-setup-root.service... Mar 17 18:18:27.551128 initrd-setup-root[1245]: cut: /sysroot/etc/passwd: No such file or directory Mar 17 18:18:27.565246 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1240) Mar 17 18:18:27.571436 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Mar 17 18:18:27.571505 kernel: BTRFS info (device nvme0n1p6): using free space tree Mar 17 18:18:27.573821 kernel: BTRFS info (device nvme0n1p6): has skinny extents Mar 17 18:18:27.573889 initrd-setup-root[1253]: cut: /sysroot/etc/group: No such file or directory Mar 17 18:18:27.582495 initrd-setup-root[1275]: cut: /sysroot/etc/shadow: No such file or directory Mar 17 18:18:27.590327 initrd-setup-root[1285]: cut: /sysroot/etc/gshadow: No such file or directory Mar 17 18:18:27.620254 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Mar 17 18:18:27.631993 systemd[1]: Mounted sysroot-usr-share-oem.mount. Mar 17 18:18:27.801181 systemd[1]: Finished initrd-setup-root.service. Mar 17 18:18:27.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.805661 systemd[1]: Starting ignition-mount.service... Mar 17 18:18:27.815945 kernel: audit: type=1130 audit(1742235507.803:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.816670 systemd[1]: Starting sysroot-boot.service... Mar 17 18:18:27.829432 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Mar 17 18:18:27.829626 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Mar 17 18:18:27.865650 systemd[1]: Finished sysroot-boot.service. Mar 17 18:18:27.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.876283 kernel: audit: type=1130 audit(1742235507.867:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.909536 ignition[1308]: INFO : Ignition 2.14.0 Mar 17 18:18:27.909536 ignition[1308]: INFO : Stage: mount Mar 17 18:18:27.912943 ignition[1308]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:18:27.912943 ignition[1308]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Mar 17 18:18:27.926872 ignition[1308]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Mar 17 18:18:27.929398 ignition[1308]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Mar 17 18:18:27.932462 ignition[1308]: INFO : PUT result: OK Mar 17 18:18:27.938362 ignition[1308]: INFO : mount: mount passed Mar 17 18:18:27.939901 ignition[1308]: INFO : Ignition finished successfully Mar 17 18:18:27.942155 systemd[1]: Finished ignition-mount.service. Mar 17 18:18:27.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.946373 systemd[1]: Starting ignition-files.service... Mar 17 18:18:27.954657 kernel: audit: type=1130 audit(1742235507.943:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:27.963828 systemd[1]: Mounting sysroot-usr-share-oem.mount... Mar 17 18:18:27.993249 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1315) Mar 17 18:18:27.999315 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Mar 17 18:18:27.999384 kernel: BTRFS info (device nvme0n1p6): using free space tree Mar 17 18:18:27.999419 kernel: BTRFS info (device nvme0n1p6): has skinny extents Mar 17 18:18:28.015264 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Mar 17 18:18:28.021019 systemd[1]: Mounted sysroot-usr-share-oem.mount. Mar 17 18:18:28.040766 ignition[1334]: INFO : Ignition 2.14.0 Mar 17 18:18:28.040766 ignition[1334]: INFO : Stage: files Mar 17 18:18:28.044424 ignition[1334]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:18:28.044424 ignition[1334]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Mar 17 18:18:28.057579 ignition[1334]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Mar 17 18:18:28.059984 ignition[1334]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Mar 17 18:18:28.062892 ignition[1334]: INFO : PUT result: OK Mar 17 18:18:28.068583 ignition[1334]: DEBUG : files: compiled without relabeling support, skipping Mar 17 18:18:28.072682 ignition[1334]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Mar 17 18:18:28.072682 ignition[1334]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Mar 17 18:18:28.119039 ignition[1334]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Mar 17 18:18:28.121723 ignition[1334]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Mar 17 18:18:28.124618 unknown[1334]: wrote ssh authorized keys file for user: core Mar 17 18:18:28.126714 ignition[1334]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Mar 17 18:18:28.130626 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Mar 17 18:18:28.134196 ignition[1334]: INFO : GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Mar 17 18:18:28.195437 systemd-networkd[1179]: eth0: Gained IPv6LL Mar 17 18:18:28.230767 ignition[1334]: INFO : GET result: OK Mar 17 18:18:28.425835 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Mar 17 18:18:28.429543 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Mar 17 18:18:28.429543 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Mar 17 18:18:28.444183 ignition[1334]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3251334967" Mar 17 18:18:28.446958 ignition[1334]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3251334967": device or resource busy Mar 17 18:18:28.446958 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3251334967", trying btrfs: device or resource busy Mar 17 18:18:28.446958 ignition[1334]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3251334967" Mar 17 18:18:28.456047 ignition[1334]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3251334967" Mar 17 18:18:28.456047 ignition[1334]: INFO : op(3): [started] unmounting "/mnt/oem3251334967" Mar 17 18:18:28.456047 ignition[1334]: INFO : op(3): [finished] unmounting "/mnt/oem3251334967" Mar 17 18:18:28.456047 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Mar 17 18:18:28.456047 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Mar 17 18:18:28.469748 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Mar 17 18:18:28.475537 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:18:28.479132 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Mar 17 18:18:28.482453 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:18:28.486047 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Mar 17 18:18:28.489455 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:18:28.492888 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Mar 17 18:18:28.496396 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:18:28.499900 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Mar 17 18:18:28.503170 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.0-arm64.raw" Mar 17 18:18:28.507831 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.0-arm64.raw" Mar 17 18:18:28.512459 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Mar 17 18:18:28.512459 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Mar 17 18:18:28.526931 ignition[1334]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem931085276" Mar 17 18:18:28.526931 ignition[1334]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem931085276": device or resource busy Mar 17 18:18:28.526931 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem931085276", trying btrfs: device or resource busy Mar 17 18:18:28.526931 ignition[1334]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem931085276" Mar 17 18:18:28.526931 ignition[1334]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem931085276" Mar 17 18:18:28.526931 ignition[1334]: INFO : op(6): [started] unmounting "/mnt/oem931085276" Mar 17 18:18:28.544848 ignition[1334]: INFO : op(6): [finished] unmounting "/mnt/oem931085276" Mar 17 18:18:28.547102 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Mar 17 18:18:28.550697 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Mar 17 18:18:28.550697 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Mar 17 18:18:28.570021 ignition[1334]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2396232968" Mar 17 18:18:28.570021 ignition[1334]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2396232968": device or resource busy Mar 17 18:18:28.570021 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2396232968", trying btrfs: device or resource busy Mar 17 18:18:28.570021 ignition[1334]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2396232968" Mar 17 18:18:28.570021 ignition[1334]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2396232968" Mar 17 18:18:28.570021 ignition[1334]: INFO : op(9): [started] unmounting "/mnt/oem2396232968" Mar 17 18:18:28.570021 ignition[1334]: INFO : op(9): [finished] unmounting "/mnt/oem2396232968" Mar 17 18:18:28.570021 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Mar 17 18:18:28.598870 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Mar 17 18:18:28.598870 ignition[1334]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Mar 17 18:18:28.620427 ignition[1334]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1165975909" Mar 17 18:18:28.620427 ignition[1334]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1165975909": device or resource busy Mar 17 18:18:28.620427 ignition[1334]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1165975909", trying btrfs: device or resource busy Mar 17 18:18:28.620427 ignition[1334]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1165975909" Mar 17 18:18:28.620427 ignition[1334]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1165975909" Mar 17 18:18:28.620427 ignition[1334]: INFO : op(c): [started] unmounting "/mnt/oem1165975909" Mar 17 18:18:28.620427 ignition[1334]: INFO : op(c): [finished] unmounting "/mnt/oem1165975909" Mar 17 18:18:28.620427 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Mar 17 18:18:28.620427 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.0-arm64.raw" Mar 17 18:18:28.620427 ignition[1334]: INFO : GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.32.0-arm64.raw: attempt #1 Mar 17 18:18:28.630249 systemd[1]: mnt-oem1165975909.mount: Deactivated successfully. Mar 17 18:18:29.096833 ignition[1334]: INFO : GET result: OK Mar 17 18:18:29.949726 ignition[1334]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.0-arm64.raw" Mar 17 18:18:29.949726 ignition[1334]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(12): [started] processing unit "nvidia.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(12): [finished] processing unit "nvidia.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Mar 17 18:18:29.956654 ignition[1334]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:18:29.981264 ignition[1334]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Mar 17 18:18:29.981264 ignition[1334]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Mar 17 18:18:29.981264 ignition[1334]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Mar 17 18:18:29.981264 ignition[1334]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Mar 17 18:18:29.981264 ignition[1334]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Mar 17 18:18:29.981264 ignition[1334]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Mar 17 18:18:29.981264 ignition[1334]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Mar 17 18:18:30.008543 ignition[1334]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Mar 17 18:18:30.008543 ignition[1334]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Mar 17 18:18:30.008543 ignition[1334]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Mar 17 18:18:30.008543 ignition[1334]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:18:30.008543 ignition[1334]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Mar 17 18:18:30.008543 ignition[1334]: INFO : files: files passed Mar 17 18:18:30.008543 ignition[1334]: INFO : Ignition finished successfully Mar 17 18:18:30.041414 kernel: audit: type=1130 audit(1742235510.009:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.008289 systemd[1]: Finished ignition-files.service. Mar 17 18:18:30.026920 systemd[1]: Starting initrd-setup-root-after-ignition.service... Mar 17 18:18:30.047282 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Mar 17 18:18:30.052151 systemd[1]: Starting ignition-quench.service... Mar 17 18:18:30.059891 systemd[1]: ignition-quench.service: Deactivated successfully. Mar 17 18:18:30.070598 kernel: audit: type=1130 audit(1742235510.061:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.060092 systemd[1]: Finished ignition-quench.service. Mar 17 18:18:30.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.075230 initrd-setup-root-after-ignition[1359]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Mar 17 18:18:30.079794 systemd[1]: Finished initrd-setup-root-after-ignition.service. Mar 17 18:18:30.083565 systemd[1]: Reached target ignition-complete.target. Mar 17 18:18:30.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.088174 systemd[1]: Starting initrd-parse-etc.service... Mar 17 18:18:30.116364 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Mar 17 18:18:30.117523 systemd[1]: Finished initrd-parse-etc.service. Mar 17 18:18:30.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.120784 systemd[1]: Reached target initrd-fs.target. Mar 17 18:18:30.122782 systemd[1]: Reached target initrd.target. Mar 17 18:18:30.136801 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Mar 17 18:18:30.139384 systemd[1]: Starting dracut-pre-pivot.service... Mar 17 18:18:30.164116 systemd[1]: Finished dracut-pre-pivot.service. Mar 17 18:18:30.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.167733 systemd[1]: Starting initrd-cleanup.service... Mar 17 18:18:30.187861 systemd[1]: Stopped target nss-lookup.target. Mar 17 18:18:30.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.188197 systemd[1]: Stopped target remote-cryptsetup.target. Mar 17 18:18:30.188973 systemd[1]: Stopped target timers.target. Mar 17 18:18:30.189650 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Mar 17 18:18:30.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.189860 systemd[1]: Stopped dracut-pre-pivot.service. Mar 17 18:18:30.190567 systemd[1]: Stopped target initrd.target. Mar 17 18:18:30.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.292530 ignition[1372]: INFO : Ignition 2.14.0 Mar 17 18:18:30.292530 ignition[1372]: INFO : Stage: umount Mar 17 18:18:30.292530 ignition[1372]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Mar 17 18:18:30.292530 ignition[1372]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Mar 17 18:18:30.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.191068 systemd[1]: Stopped target basic.target. Mar 17 18:18:30.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.324368 ignition[1372]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Mar 17 18:18:30.324368 ignition[1372]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Mar 17 18:18:30.191791 systemd[1]: Stopped target ignition-complete.target. Mar 17 18:18:30.330915 ignition[1372]: INFO : PUT result: OK Mar 17 18:18:30.192509 systemd[1]: Stopped target ignition-diskful.target. Mar 17 18:18:30.193214 systemd[1]: Stopped target initrd-root-device.target. Mar 17 18:18:30.193918 systemd[1]: Stopped target remote-fs.target. Mar 17 18:18:30.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.346062 ignition[1372]: INFO : umount: umount passed Mar 17 18:18:30.346062 ignition[1372]: INFO : Ignition finished successfully Mar 17 18:18:30.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.194631 systemd[1]: Stopped target remote-fs-pre.target. Mar 17 18:18:30.195363 systemd[1]: Stopped target sysinit.target. Mar 17 18:18:30.370000 audit: BPF prog-id=6 op=UNLOAD Mar 17 18:18:30.196071 systemd[1]: Stopped target local-fs.target. Mar 17 18:18:30.196804 systemd[1]: Stopped target local-fs-pre.target. Mar 17 18:18:30.197512 systemd[1]: Stopped target swap.target. Mar 17 18:18:30.198127 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Mar 17 18:18:30.198373 systemd[1]: Stopped dracut-pre-mount.service. Mar 17 18:18:30.199049 systemd[1]: Stopped target cryptsetup.target. Mar 17 18:18:30.199563 systemd[1]: dracut-initqueue.service: Deactivated successfully. Mar 17 18:18:30.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.199750 systemd[1]: Stopped dracut-initqueue.service. Mar 17 18:18:30.200466 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Mar 17 18:18:30.200686 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Mar 17 18:18:30.201105 systemd[1]: ignition-files.service: Deactivated successfully. Mar 17 18:18:30.201312 systemd[1]: Stopped ignition-files.service. Mar 17 18:18:30.203185 systemd[1]: Stopping ignition-mount.service... Mar 17 18:18:30.267547 systemd[1]: Stopping sysroot-boot.service... Mar 17 18:18:30.270419 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Mar 17 18:18:30.270765 systemd[1]: Stopped systemd-udev-trigger.service. Mar 17 18:18:30.274920 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Mar 17 18:18:30.275447 systemd[1]: Stopped dracut-pre-trigger.service. Mar 17 18:18:30.294457 systemd[1]: initrd-cleanup.service: Deactivated successfully. Mar 17 18:18:30.297149 systemd[1]: Finished initrd-cleanup.service. Mar 17 18:18:30.305760 systemd[1]: sysroot-boot.mount: Deactivated successfully. Mar 17 18:18:30.317150 systemd[1]: sysroot-boot.service: Deactivated successfully. Mar 17 18:18:30.317360 systemd[1]: Stopped sysroot-boot.service. Mar 17 18:18:30.338020 systemd[1]: ignition-mount.service: Deactivated successfully. Mar 17 18:18:30.338196 systemd[1]: Stopped ignition-mount.service. Mar 17 18:18:30.342050 systemd[1]: ignition-disks.service: Deactivated successfully. Mar 17 18:18:30.342142 systemd[1]: Stopped ignition-disks.service. Mar 17 18:18:30.344333 systemd[1]: ignition-kargs.service: Deactivated successfully. Mar 17 18:18:30.344416 systemd[1]: Stopped ignition-kargs.service. Mar 17 18:18:30.346044 systemd[1]: ignition-fetch.service: Deactivated successfully. Mar 17 18:18:30.346128 systemd[1]: Stopped ignition-fetch.service. Mar 17 18:18:30.347745 systemd[1]: Stopped target network.target. Mar 17 18:18:30.347936 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Mar 17 18:18:30.348025 systemd[1]: Stopped ignition-fetch-offline.service. Mar 17 18:18:30.348319 systemd[1]: Stopped target paths.target. Mar 17 18:18:30.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.348818 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Mar 17 18:18:30.352266 systemd[1]: Stopped systemd-ask-password-console.path. Mar 17 18:18:30.352460 systemd[1]: Stopped target slices.target. Mar 17 18:18:30.352767 systemd[1]: Stopped target sockets.target. Mar 17 18:18:30.353113 systemd[1]: iscsid.socket: Deactivated successfully. Mar 17 18:18:30.353166 systemd[1]: Closed iscsid.socket. Mar 17 18:18:30.353715 systemd[1]: iscsiuio.socket: Deactivated successfully. Mar 17 18:18:30.353766 systemd[1]: Closed iscsiuio.socket. Mar 17 18:18:30.353987 systemd[1]: ignition-setup.service: Deactivated successfully. Mar 17 18:18:30.354063 systemd[1]: Stopped ignition-setup.service. Mar 17 18:18:30.354618 systemd[1]: initrd-setup-root.service: Deactivated successfully. Mar 17 18:18:30.354689 systemd[1]: Stopped initrd-setup-root.service. Mar 17 18:18:30.355133 systemd[1]: Stopping systemd-networkd.service... Mar 17 18:18:30.356232 systemd[1]: Stopping systemd-resolved.service... Mar 17 18:18:30.364607 systemd[1]: systemd-resolved.service: Deactivated successfully. Mar 17 18:18:30.364809 systemd[1]: Stopped systemd-resolved.service. Mar 17 18:18:30.368268 systemd-networkd[1179]: eth0: DHCPv6 lease lost Mar 17 18:18:30.450000 audit: BPF prog-id=9 op=UNLOAD Mar 17 18:18:30.372892 systemd[1]: systemd-networkd.service: Deactivated successfully. Mar 17 18:18:30.373121 systemd[1]: Stopped systemd-networkd.service. Mar 17 18:18:30.392988 systemd[1]: systemd-networkd.socket: Deactivated successfully. Mar 17 18:18:30.395704 systemd[1]: Closed systemd-networkd.socket. Mar 17 18:18:30.425108 systemd[1]: Stopping network-cleanup.service... Mar 17 18:18:30.440009 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Mar 17 18:18:30.440136 systemd[1]: Stopped parse-ip-for-networkd.service. Mar 17 18:18:30.441314 systemd[1]: systemd-sysctl.service: Deactivated successfully. Mar 17 18:18:30.441396 systemd[1]: Stopped systemd-sysctl.service. Mar 17 18:18:30.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.479485 systemd[1]: systemd-modules-load.service: Deactivated successfully. Mar 17 18:18:30.479601 systemd[1]: Stopped systemd-modules-load.service. Mar 17 18:18:30.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.485051 systemd[1]: Stopping systemd-udevd.service... Mar 17 18:18:30.492766 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Mar 17 18:18:30.500874 systemd[1]: systemd-udevd.service: Deactivated successfully. Mar 17 18:18:30.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.501284 systemd[1]: Stopped systemd-udevd.service. Mar 17 18:18:30.504048 systemd[1]: network-cleanup.service: Deactivated successfully. Mar 17 18:18:30.504544 systemd[1]: Stopped network-cleanup.service. Mar 17 18:18:30.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.516817 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Mar 17 18:18:30.516918 systemd[1]: Closed systemd-udevd-control.socket. Mar 17 18:18:30.518906 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Mar 17 18:18:30.518989 systemd[1]: Closed systemd-udevd-kernel.socket. Mar 17 18:18:30.524323 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Mar 17 18:18:30.524465 systemd[1]: Stopped dracut-pre-udev.service. Mar 17 18:18:30.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.533422 systemd[1]: dracut-cmdline.service: Deactivated successfully. Mar 17 18:18:30.533538 systemd[1]: Stopped dracut-cmdline.service. Mar 17 18:18:30.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.538404 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Mar 17 18:18:30.538548 systemd[1]: Stopped dracut-cmdline-ask.service. Mar 17 18:18:30.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.545602 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Mar 17 18:18:30.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.560729 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Mar 17 18:18:30.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.560898 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Mar 17 18:18:30.563048 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Mar 17 18:18:30.563156 systemd[1]: Stopped kmod-static-nodes.service. Mar 17 18:18:30.565081 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Mar 17 18:18:30.565189 systemd[1]: Stopped systemd-vconsole-setup.service. Mar 17 18:18:30.581477 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Mar 17 18:18:30.585106 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Mar 17 18:18:30.587239 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Mar 17 18:18:30.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:30.591309 systemd[1]: Reached target initrd-switch-root.target. Mar 17 18:18:30.595838 systemd[1]: Starting initrd-switch-root.service... Mar 17 18:18:30.614316 systemd[1]: Switching root. Mar 17 18:18:30.643765 iscsid[1184]: iscsid shutting down. Mar 17 18:18:30.648792 systemd-journald[309]: Received SIGTERM from PID 1 (systemd). Mar 17 18:18:30.648898 systemd-journald[309]: Journal stopped Mar 17 18:18:36.870036 kernel: SELinux: Class mctp_socket not defined in policy. Mar 17 18:18:36.870169 kernel: SELinux: Class anon_inode not defined in policy. Mar 17 18:18:36.870245 kernel: SELinux: the above unknown classes and permissions will be allowed Mar 17 18:18:36.870283 kernel: SELinux: policy capability network_peer_controls=1 Mar 17 18:18:36.872327 kernel: SELinux: policy capability open_perms=1 Mar 17 18:18:36.872392 kernel: SELinux: policy capability extended_socket_class=1 Mar 17 18:18:36.872497 kernel: SELinux: policy capability always_check_network=0 Mar 17 18:18:36.872536 kernel: SELinux: policy capability cgroup_seclabel=1 Mar 17 18:18:36.872567 kernel: SELinux: policy capability nnp_nosuid_transition=1 Mar 17 18:18:36.872606 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Mar 17 18:18:36.872642 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Mar 17 18:18:36.872680 systemd[1]: Successfully loaded SELinux policy in 129.547ms. Mar 17 18:18:36.872745 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 24.105ms. Mar 17 18:18:36.872782 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Mar 17 18:18:36.872816 systemd[1]: Detected virtualization amazon. Mar 17 18:18:36.872847 systemd[1]: Detected architecture arm64. Mar 17 18:18:36.872878 systemd[1]: Detected first boot. Mar 17 18:18:36.872921 systemd[1]: Initializing machine ID from VM UUID. Mar 17 18:18:36.872960 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Mar 17 18:18:36.873050 systemd[1]: Populated /etc with preset unit settings. Mar 17 18:18:36.873087 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:18:36.873126 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:18:36.873166 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:18:36.873228 kernel: kauditd_printk_skb: 55 callbacks suppressed Mar 17 18:18:36.873269 kernel: audit: type=1334 audit(1742235516.425:87): prog-id=12 op=LOAD Mar 17 18:18:36.873303 kernel: audit: type=1334 audit(1742235516.425:88): prog-id=3 op=UNLOAD Mar 17 18:18:36.873339 kernel: audit: type=1334 audit(1742235516.426:89): prog-id=13 op=LOAD Mar 17 18:18:36.873369 kernel: audit: type=1334 audit(1742235516.429:90): prog-id=14 op=LOAD Mar 17 18:18:36.873397 kernel: audit: type=1334 audit(1742235516.429:91): prog-id=4 op=UNLOAD Mar 17 18:18:36.873428 kernel: audit: type=1334 audit(1742235516.429:92): prog-id=5 op=UNLOAD Mar 17 18:18:36.873457 systemd[1]: iscsiuio.service: Deactivated successfully. Mar 17 18:18:36.873491 kernel: audit: type=1334 audit(1742235516.431:93): prog-id=15 op=LOAD Mar 17 18:18:36.873522 systemd[1]: Stopped iscsiuio.service. Mar 17 18:18:36.873556 kernel: audit: type=1334 audit(1742235516.431:94): prog-id=12 op=UNLOAD Mar 17 18:18:36.873586 kernel: audit: type=1334 audit(1742235516.433:95): prog-id=16 op=LOAD Mar 17 18:18:36.873617 kernel: audit: type=1334 audit(1742235516.435:96): prog-id=17 op=LOAD Mar 17 18:18:36.873649 systemd[1]: iscsid.service: Deactivated successfully. Mar 17 18:18:36.873680 systemd[1]: Stopped iscsid.service. Mar 17 18:18:36.873713 systemd[1]: initrd-switch-root.service: Deactivated successfully. Mar 17 18:18:36.873749 systemd[1]: Stopped initrd-switch-root.service. Mar 17 18:18:36.873784 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Mar 17 18:18:36.873831 systemd[1]: Created slice system-addon\x2dconfig.slice. Mar 17 18:18:36.873863 systemd[1]: Created slice system-addon\x2drun.slice. Mar 17 18:18:36.873895 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Mar 17 18:18:36.873927 systemd[1]: Created slice system-getty.slice. Mar 17 18:18:36.873957 systemd[1]: Created slice system-modprobe.slice. Mar 17 18:18:36.873989 systemd[1]: Created slice system-serial\x2dgetty.slice. Mar 17 18:18:36.874021 systemd[1]: Created slice system-system\x2dcloudinit.slice. Mar 17 18:18:36.874051 systemd[1]: Created slice system-systemd\x2dfsck.slice. Mar 17 18:18:36.874086 systemd[1]: Created slice user.slice. Mar 17 18:18:36.874122 systemd[1]: Started systemd-ask-password-console.path. Mar 17 18:18:36.874152 systemd[1]: Started systemd-ask-password-wall.path. Mar 17 18:18:36.874183 systemd[1]: Set up automount boot.automount. Mar 17 18:18:36.874246 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Mar 17 18:18:36.874281 systemd[1]: Stopped target initrd-switch-root.target. Mar 17 18:18:36.874313 systemd[1]: Stopped target initrd-fs.target. Mar 17 18:18:36.874346 systemd[1]: Stopped target initrd-root-fs.target. Mar 17 18:18:36.874375 systemd[1]: Reached target integritysetup.target. Mar 17 18:18:36.874407 systemd[1]: Reached target remote-cryptsetup.target. Mar 17 18:18:36.874445 systemd[1]: Reached target remote-fs.target. Mar 17 18:18:36.874477 systemd[1]: Reached target slices.target. Mar 17 18:18:36.874509 systemd[1]: Reached target swap.target. Mar 17 18:18:36.874549 systemd[1]: Reached target torcx.target. Mar 17 18:18:36.874583 systemd[1]: Reached target veritysetup.target. Mar 17 18:18:36.874613 systemd[1]: Listening on systemd-coredump.socket. Mar 17 18:18:36.874643 systemd[1]: Listening on systemd-initctl.socket. Mar 17 18:18:36.874672 systemd[1]: Listening on systemd-networkd.socket. Mar 17 18:18:36.874702 systemd[1]: Listening on systemd-udevd-control.socket. Mar 17 18:18:36.874740 systemd[1]: Listening on systemd-udevd-kernel.socket. Mar 17 18:18:36.874771 systemd[1]: Listening on systemd-userdbd.socket. Mar 17 18:18:36.874801 systemd[1]: Mounting dev-hugepages.mount... Mar 17 18:18:36.874833 systemd[1]: Mounting dev-mqueue.mount... Mar 17 18:18:36.874873 systemd[1]: Mounting media.mount... Mar 17 18:18:36.874908 systemd[1]: Mounting sys-kernel-debug.mount... Mar 17 18:18:36.874940 systemd[1]: Mounting sys-kernel-tracing.mount... Mar 17 18:18:36.874973 systemd[1]: Mounting tmp.mount... Mar 17 18:18:36.876813 systemd[1]: Starting flatcar-tmpfiles.service... Mar 17 18:18:36.876855 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:18:36.876896 systemd[1]: Starting kmod-static-nodes.service... Mar 17 18:18:36.876929 systemd[1]: Starting modprobe@configfs.service... Mar 17 18:18:36.876963 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:18:36.876994 systemd[1]: Starting modprobe@drm.service... Mar 17 18:18:36.877028 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:18:36.877071 systemd[1]: Starting modprobe@fuse.service... Mar 17 18:18:36.877102 systemd[1]: Starting modprobe@loop.service... Mar 17 18:18:36.877162 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Mar 17 18:18:36.881500 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Mar 17 18:18:36.881585 systemd[1]: Stopped systemd-fsck-root.service. Mar 17 18:18:36.881619 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Mar 17 18:18:36.881653 systemd[1]: Stopped systemd-fsck-usr.service. Mar 17 18:18:36.881684 systemd[1]: Stopped systemd-journald.service. Mar 17 18:18:36.881715 systemd[1]: Starting systemd-journald.service... Mar 17 18:18:36.881744 kernel: fuse: init (API version 7.34) Mar 17 18:18:36.881775 systemd[1]: Starting systemd-modules-load.service... Mar 17 18:18:36.881808 systemd[1]: Starting systemd-network-generator.service... Mar 17 18:18:36.881840 systemd[1]: Starting systemd-remount-fs.service... Mar 17 18:18:36.881881 systemd[1]: Starting systemd-udev-trigger.service... Mar 17 18:18:36.881913 systemd[1]: verity-setup.service: Deactivated successfully. Mar 17 18:18:36.881942 systemd[1]: Stopped verity-setup.service. Mar 17 18:18:36.881972 systemd[1]: Mounted dev-hugepages.mount. Mar 17 18:18:36.882001 systemd[1]: Mounted dev-mqueue.mount. Mar 17 18:18:36.882030 systemd[1]: Mounted media.mount. Mar 17 18:18:36.882059 systemd[1]: Mounted sys-kernel-debug.mount. Mar 17 18:18:36.882090 systemd[1]: Mounted sys-kernel-tracing.mount. Mar 17 18:18:36.882119 systemd[1]: Mounted tmp.mount. Mar 17 18:18:36.882154 systemd[1]: Finished kmod-static-nodes.service. Mar 17 18:18:36.882187 kernel: loop: module loaded Mar 17 18:18:36.882675 systemd[1]: modprobe@configfs.service: Deactivated successfully. Mar 17 18:18:36.882830 systemd[1]: Finished modprobe@configfs.service. Mar 17 18:18:36.882865 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:18:36.882906 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:18:36.882941 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:18:36.882974 systemd[1]: Finished modprobe@drm.service. Mar 17 18:18:36.883005 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:18:36.883035 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:18:36.883065 systemd[1]: modprobe@fuse.service: Deactivated successfully. Mar 17 18:18:36.883095 systemd[1]: Finished modprobe@fuse.service. Mar 17 18:18:36.883125 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:18:36.883156 systemd[1]: Finished modprobe@loop.service. Mar 17 18:18:36.883192 systemd[1]: Finished systemd-network-generator.service. Mar 17 18:18:36.885375 systemd[1]: Finished systemd-modules-load.service. Mar 17 18:18:36.885440 systemd[1]: Finished systemd-remount-fs.service. Mar 17 18:18:36.885473 systemd[1]: Reached target network-pre.target. Mar 17 18:18:36.885509 systemd-journald[1480]: Journal started Mar 17 18:18:36.885636 systemd-journald[1480]: Runtime Journal (/run/log/journal/ec2e068f3487116902ff0bb20ff029c8) is 8.0M, max 75.4M, 67.4M free. Mar 17 18:18:31.597000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Mar 17 18:18:31.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:18:31.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Mar 17 18:18:31.828000 audit: BPF prog-id=10 op=LOAD Mar 17 18:18:31.828000 audit: BPF prog-id=10 op=UNLOAD Mar 17 18:18:31.828000 audit: BPF prog-id=11 op=LOAD Mar 17 18:18:31.828000 audit: BPF prog-id=11 op=UNLOAD Mar 17 18:18:32.070000 audit[1406]: AVC avc: denied { associate } for pid=1406 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Mar 17 18:18:32.070000 audit[1406]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458b2 a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1389 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:32.070000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:18:32.074000 audit[1406]: AVC avc: denied { associate } for pid=1406 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Mar 17 18:18:32.074000 audit[1406]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145989 a2=1ed a3=0 items=2 ppid=1389 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:32.074000 audit: CWD cwd="/" Mar 17 18:18:32.074000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:18:32.074000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:18:32.074000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Mar 17 18:18:36.425000 audit: BPF prog-id=12 op=LOAD Mar 17 18:18:36.425000 audit: BPF prog-id=3 op=UNLOAD Mar 17 18:18:36.426000 audit: BPF prog-id=13 op=LOAD Mar 17 18:18:36.429000 audit: BPF prog-id=14 op=LOAD Mar 17 18:18:36.897366 systemd[1]: Mounting sys-fs-fuse-connections.mount... Mar 17 18:18:36.897444 systemd[1]: Mounting sys-kernel-config.mount... Mar 17 18:18:36.429000 audit: BPF prog-id=4 op=UNLOAD Mar 17 18:18:36.429000 audit: BPF prog-id=5 op=UNLOAD Mar 17 18:18:36.431000 audit: BPF prog-id=15 op=LOAD Mar 17 18:18:36.431000 audit: BPF prog-id=12 op=UNLOAD Mar 17 18:18:36.433000 audit: BPF prog-id=16 op=LOAD Mar 17 18:18:36.435000 audit: BPF prog-id=17 op=LOAD Mar 17 18:18:36.435000 audit: BPF prog-id=13 op=UNLOAD Mar 17 18:18:36.435000 audit: BPF prog-id=14 op=UNLOAD Mar 17 18:18:36.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.446000 audit: BPF prog-id=15 op=UNLOAD Mar 17 18:18:36.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.725000 audit: BPF prog-id=18 op=LOAD Mar 17 18:18:36.725000 audit: BPF prog-id=19 op=LOAD Mar 17 18:18:36.725000 audit: BPF prog-id=20 op=LOAD Mar 17 18:18:36.725000 audit: BPF prog-id=16 op=UNLOAD Mar 17 18:18:36.725000 audit: BPF prog-id=17 op=UNLOAD Mar 17 18:18:36.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.863000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Mar 17 18:18:36.863000 audit[1480]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffda6ac2d0 a2=4000 a3=1 items=0 ppid=1 pid=1480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:36.863000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Mar 17 18:18:36.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.421162 systemd[1]: Queued start job for default target multi-user.target. Mar 17 18:18:32.058857 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:18:36.908169 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Mar 17 18:18:36.421185 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Mar 17 18:18:32.068793 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:18:36.439674 systemd[1]: systemd-journald.service: Deactivated successfully. Mar 17 18:18:32.068851 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:18:32.068917 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Mar 17 18:18:32.068943 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="skipped missing lower profile" missing profile=oem Mar 17 18:18:32.069009 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Mar 17 18:18:32.069040 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Mar 17 18:18:32.069501 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Mar 17 18:18:32.069586 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Mar 17 18:18:32.069622 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Mar 17 18:18:32.070863 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Mar 17 18:18:32.070949 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Mar 17 18:18:32.070997 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Mar 17 18:18:32.071037 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Mar 17 18:18:32.071086 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Mar 17 18:18:32.071125 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Mar 17 18:18:35.500257 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:35Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:18:35.500850 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:35Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:18:35.501130 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:35Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:18:35.501622 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:35Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Mar 17 18:18:35.501744 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:35Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Mar 17 18:18:35.501886 /usr/lib/systemd/system-generators/torcx-generator[1406]: time="2025-03-17T18:18:35Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Mar 17 18:18:36.928337 systemd[1]: Starting systemd-hwdb-update.service... Mar 17 18:18:36.928419 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:18:36.935368 systemd[1]: Starting systemd-random-seed.service... Mar 17 18:18:36.939280 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:18:36.944729 systemd[1]: Starting systemd-sysctl.service... Mar 17 18:18:36.955292 systemd[1]: Started systemd-journald.service. Mar 17 18:18:36.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.958008 systemd[1]: Mounted sys-fs-fuse-connections.mount. Mar 17 18:18:36.962651 systemd[1]: Mounted sys-kernel-config.mount. Mar 17 18:18:36.968773 systemd[1]: Starting systemd-journal-flush.service... Mar 17 18:18:36.977391 systemd[1]: Finished systemd-random-seed.service. Mar 17 18:18:36.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:36.979622 systemd[1]: Reached target first-boot-complete.target. Mar 17 18:18:37.010411 systemd-journald[1480]: Time spent on flushing to /var/log/journal/ec2e068f3487116902ff0bb20ff029c8 is 72.949ms for 1138 entries. Mar 17 18:18:37.010411 systemd-journald[1480]: System Journal (/var/log/journal/ec2e068f3487116902ff0bb20ff029c8) is 8.0M, max 195.6M, 187.6M free. Mar 17 18:18:37.099359 systemd-journald[1480]: Received client request to flush runtime journal. Mar 17 18:18:37.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:37.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:37.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:37.022000 systemd[1]: Finished systemd-sysctl.service. Mar 17 18:18:37.077686 systemd[1]: Finished systemd-udev-trigger.service. Mar 17 18:18:37.082064 systemd[1]: Starting systemd-udev-settle.service... Mar 17 18:18:37.084573 systemd[1]: Finished flatcar-tmpfiles.service. Mar 17 18:18:37.089450 systemd[1]: Starting systemd-sysusers.service... Mar 17 18:18:37.103881 systemd[1]: Finished systemd-journal-flush.service. Mar 17 18:18:37.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:37.115015 udevadm[1524]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Mar 17 18:18:37.321336 systemd[1]: Finished systemd-sysusers.service. Mar 17 18:18:37.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:37.326188 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Mar 17 18:18:37.482478 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Mar 17 18:18:37.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:37.897588 systemd[1]: Finished systemd-hwdb-update.service. Mar 17 18:18:37.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:37.899000 audit: BPF prog-id=21 op=LOAD Mar 17 18:18:37.899000 audit: BPF prog-id=22 op=LOAD Mar 17 18:18:37.899000 audit: BPF prog-id=7 op=UNLOAD Mar 17 18:18:37.899000 audit: BPF prog-id=8 op=UNLOAD Mar 17 18:18:37.901848 systemd[1]: Starting systemd-udevd.service... Mar 17 18:18:37.937752 systemd-udevd[1530]: Using default interface naming scheme 'v252'. Mar 17 18:18:38.004784 systemd[1]: Started systemd-udevd.service. Mar 17 18:18:38.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.006000 audit: BPF prog-id=23 op=LOAD Mar 17 18:18:38.010716 systemd[1]: Starting systemd-networkd.service... Mar 17 18:18:38.021000 audit: BPF prog-id=24 op=LOAD Mar 17 18:18:38.021000 audit: BPF prog-id=25 op=LOAD Mar 17 18:18:38.021000 audit: BPF prog-id=26 op=LOAD Mar 17 18:18:38.024104 systemd[1]: Starting systemd-userdbd.service... Mar 17 18:18:38.120661 systemd[1]: Started systemd-userdbd.service. Mar 17 18:18:38.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.130679 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Mar 17 18:18:38.156679 (udev-worker)[1537]: Network interface NamePolicy= disabled on kernel command line. Mar 17 18:18:38.295496 systemd-networkd[1536]: lo: Link UP Mar 17 18:18:38.295522 systemd-networkd[1536]: lo: Gained carrier Mar 17 18:18:38.296543 systemd-networkd[1536]: Enumeration completed Mar 17 18:18:38.296717 systemd[1]: Started systemd-networkd.service. Mar 17 18:18:38.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.300873 systemd[1]: Starting systemd-networkd-wait-online.service... Mar 17 18:18:38.305193 systemd-networkd[1536]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Mar 17 18:18:38.311240 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:18:38.311924 systemd-networkd[1536]: eth0: Link UP Mar 17 18:18:38.312250 systemd-networkd[1536]: eth0: Gained carrier Mar 17 18:18:38.321528 systemd-networkd[1536]: eth0: DHCPv4 address 172.31.25.97/20, gateway 172.31.16.1 acquired from 172.31.16.1 Mar 17 18:18:38.479336 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Mar 17 18:18:38.481990 systemd[1]: Finished systemd-udev-settle.service. Mar 17 18:18:38.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.486407 systemd[1]: Starting lvm2-activation-early.service... Mar 17 18:18:38.550256 lvm[1649]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:18:38.589896 systemd[1]: Finished lvm2-activation-early.service. Mar 17 18:18:38.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.591951 systemd[1]: Reached target cryptsetup.target. Mar 17 18:18:38.595850 systemd[1]: Starting lvm2-activation.service... Mar 17 18:18:38.604051 lvm[1650]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Mar 17 18:18:38.640032 systemd[1]: Finished lvm2-activation.service. Mar 17 18:18:38.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.642021 systemd[1]: Reached target local-fs-pre.target. Mar 17 18:18:38.643919 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Mar 17 18:18:38.643969 systemd[1]: Reached target local-fs.target. Mar 17 18:18:38.645825 systemd[1]: Reached target machines.target. Mar 17 18:18:38.660852 systemd[1]: Starting ldconfig.service... Mar 17 18:18:38.664348 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:18:38.664697 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:18:38.667295 systemd[1]: Starting systemd-boot-update.service... Mar 17 18:18:38.671661 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Mar 17 18:18:38.676357 systemd[1]: Starting systemd-machine-id-commit.service... Mar 17 18:18:38.681616 systemd[1]: Starting systemd-sysext.service... Mar 17 18:18:38.696347 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1652 (bootctl) Mar 17 18:18:38.699309 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Mar 17 18:18:38.723443 systemd[1]: Unmounting usr-share-oem.mount... Mar 17 18:18:38.734032 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Mar 17 18:18:38.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.745524 systemd[1]: usr-share-oem.mount: Deactivated successfully. Mar 17 18:18:38.745932 systemd[1]: Unmounted usr-share-oem.mount. Mar 17 18:18:38.767338 kernel: loop0: detected capacity change from 0 to 201592 Mar 17 18:18:38.882316 systemd-fsck[1661]: fsck.fat 4.2 (2021-01-31) Mar 17 18:18:38.882316 systemd-fsck[1661]: /dev/nvme0n1p1: 236 files, 117179/258078 clusters Mar 17 18:18:38.886463 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Mar 17 18:18:38.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:38.892762 systemd[1]: Mounting boot.mount... Mar 17 18:18:38.931136 systemd[1]: Mounted boot.mount. Mar 17 18:18:38.968647 systemd[1]: Finished systemd-boot-update.service. Mar 17 18:18:38.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.012254 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Mar 17 18:18:39.035511 kernel: loop1: detected capacity change from 0 to 201592 Mar 17 18:18:39.036094 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Mar 17 18:18:39.038688 systemd[1]: Finished systemd-machine-id-commit.service. Mar 17 18:18:39.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.054388 (sd-sysext)[1676]: Using extensions 'kubernetes'. Mar 17 18:18:39.055291 (sd-sysext)[1676]: Merged extensions into '/usr'. Mar 17 18:18:39.101158 systemd[1]: Mounting usr-share-oem.mount... Mar 17 18:18:39.103914 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.107168 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:18:39.114994 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:18:39.119577 systemd[1]: Starting modprobe@loop.service... Mar 17 18:18:39.122270 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.122606 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:18:39.130242 systemd[1]: Mounted usr-share-oem.mount. Mar 17 18:18:39.132827 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:18:39.133470 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:18:39.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.137034 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:18:39.137708 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:18:39.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.141671 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:18:39.142426 systemd[1]: Finished modprobe@loop.service. Mar 17 18:18:39.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.145984 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:18:39.146763 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.150044 systemd[1]: Finished systemd-sysext.service. Mar 17 18:18:39.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.155068 systemd[1]: Starting ensure-sysext.service... Mar 17 18:18:39.159176 systemd[1]: Starting systemd-tmpfiles-setup.service... Mar 17 18:18:39.173407 systemd[1]: Reloading. Mar 17 18:18:39.203130 systemd-tmpfiles[1683]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Mar 17 18:18:39.214522 systemd-tmpfiles[1683]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Mar 17 18:18:39.227069 systemd-tmpfiles[1683]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Mar 17 18:18:39.297964 /usr/lib/systemd/system-generators/torcx-generator[1703]: time="2025-03-17T18:18:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:18:39.298031 /usr/lib/systemd/system-generators/torcx-generator[1703]: time="2025-03-17T18:18:39Z" level=info msg="torcx already run" Mar 17 18:18:39.521696 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:18:39.521741 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:18:39.566971 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:18:39.714000 audit: BPF prog-id=27 op=LOAD Mar 17 18:18:39.714000 audit: BPF prog-id=28 op=LOAD Mar 17 18:18:39.714000 audit: BPF prog-id=21 op=UNLOAD Mar 17 18:18:39.714000 audit: BPF prog-id=22 op=UNLOAD Mar 17 18:18:39.721000 audit: BPF prog-id=29 op=LOAD Mar 17 18:18:39.721000 audit: BPF prog-id=23 op=UNLOAD Mar 17 18:18:39.724000 audit: BPF prog-id=30 op=LOAD Mar 17 18:18:39.724000 audit: BPF prog-id=24 op=UNLOAD Mar 17 18:18:39.725000 audit: BPF prog-id=31 op=LOAD Mar 17 18:18:39.725000 audit: BPF prog-id=32 op=LOAD Mar 17 18:18:39.725000 audit: BPF prog-id=25 op=UNLOAD Mar 17 18:18:39.725000 audit: BPF prog-id=26 op=UNLOAD Mar 17 18:18:39.727000 audit: BPF prog-id=33 op=LOAD Mar 17 18:18:39.727000 audit: BPF prog-id=18 op=UNLOAD Mar 17 18:18:39.727000 audit: BPF prog-id=34 op=LOAD Mar 17 18:18:39.727000 audit: BPF prog-id=35 op=LOAD Mar 17 18:18:39.728000 audit: BPF prog-id=19 op=UNLOAD Mar 17 18:18:39.728000 audit: BPF prog-id=20 op=UNLOAD Mar 17 18:18:39.738321 systemd[1]: Finished systemd-tmpfiles-setup.service. Mar 17 18:18:39.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.756404 systemd[1]: Starting audit-rules.service... Mar 17 18:18:39.768000 audit: BPF prog-id=36 op=LOAD Mar 17 18:18:39.775000 audit: BPF prog-id=37 op=LOAD Mar 17 18:18:39.760689 systemd[1]: Starting clean-ca-certificates.service... Mar 17 18:18:39.765631 systemd[1]: Starting systemd-journal-catalog-update.service... Mar 17 18:18:39.771868 systemd[1]: Starting systemd-resolved.service... Mar 17 18:18:39.779236 systemd[1]: Starting systemd-timesyncd.service... Mar 17 18:18:39.783713 systemd[1]: Starting systemd-update-utmp.service... Mar 17 18:18:39.790629 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.795915 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:18:39.801153 systemd[1]: Starting modprobe@efi_pstore.service... Mar 17 18:18:39.806890 systemd[1]: Starting modprobe@loop.service... Mar 17 18:18:39.808583 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.808936 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:18:39.814757 systemd[1]: Finished clean-ca-certificates.service. Mar 17 18:18:39.817784 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:18:39.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.818127 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:18:39.820827 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:18:39.839536 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.842479 systemd[1]: Starting modprobe@dm_mod.service... Mar 17 18:18:39.844167 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.844603 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:18:39.844896 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:18:39.854337 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.859679 systemd[1]: Starting modprobe@drm.service... Mar 17 18:18:39.861571 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.861939 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:18:39.862378 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Mar 17 18:18:39.864150 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Mar 17 18:18:39.865406 systemd[1]: Finished modprobe@efi_pstore.service. Mar 17 18:18:39.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.868282 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Mar 17 18:18:39.877091 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Mar 17 18:18:39.877471 systemd[1]: Finished modprobe@dm_mod.service. Mar 17 18:18:39.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.883279 systemd[1]: modprobe@loop.service: Deactivated successfully. Mar 17 18:18:39.883000 audit[1764]: SYSTEM_BOOT pid=1764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.883625 systemd[1]: Finished modprobe@loop.service. Mar 17 18:18:39.885967 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Mar 17 18:18:39.889099 systemd[1]: Finished ensure-sysext.service. Mar 17 18:18:39.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.893779 systemd[1]: Finished systemd-update-utmp.service. Mar 17 18:18:39.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.901382 systemd[1]: modprobe@drm.service: Deactivated successfully. Mar 17 18:18:39.901739 systemd[1]: Finished modprobe@drm.service. Mar 17 18:18:39.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.923987 systemd[1]: Finished systemd-journal-catalog-update.service. Mar 17 18:18:39.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:39.971526 systemd-networkd[1536]: eth0: Gained IPv6LL Mar 17 18:18:39.979103 systemd[1]: Finished systemd-networkd-wait-online.service. Mar 17 18:18:39.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:40.012605 systemd[1]: Started systemd-timesyncd.service. Mar 17 18:18:40.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:40.014572 systemd[1]: Reached target time-set.target. Mar 17 18:18:40.034000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Mar 17 18:18:40.034000 audit[1784]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc7dbb580 a2=420 a3=0 items=0 ppid=1759 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:40.036542 augenrules[1784]: No rules Mar 17 18:18:40.034000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Mar 17 18:18:40.037860 systemd[1]: Finished audit-rules.service. Mar 17 18:18:40.062287 systemd-resolved[1762]: Positive Trust Anchors: Mar 17 18:18:40.062319 systemd-resolved[1762]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Mar 17 18:18:40.062374 systemd-resolved[1762]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Mar 17 18:18:40.117063 systemd-timesyncd[1763]: Contacted time server 104.167.215.195:123 (0.flatcar.pool.ntp.org). Mar 17 18:18:40.117199 systemd-timesyncd[1763]: Initial clock synchronization to Mon 2025-03-17 18:18:40.429903 UTC. Mar 17 18:18:40.121173 systemd-resolved[1762]: Defaulting to hostname 'linux'. Mar 17 18:18:40.124655 systemd[1]: Started systemd-resolved.service. Mar 17 18:18:40.127326 systemd[1]: Reached target network.target. Mar 17 18:18:40.129170 systemd[1]: Reached target network-online.target. Mar 17 18:18:40.131112 systemd[1]: Reached target nss-lookup.target. Mar 17 18:18:40.336995 ldconfig[1651]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Mar 17 18:18:40.347112 systemd[1]: Finished ldconfig.service. Mar 17 18:18:40.351246 systemd[1]: Starting systemd-update-done.service... Mar 17 18:18:40.367198 systemd[1]: Finished systemd-update-done.service. Mar 17 18:18:40.369274 systemd[1]: Reached target sysinit.target. Mar 17 18:18:40.371014 systemd[1]: Started motdgen.path. Mar 17 18:18:40.372533 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Mar 17 18:18:40.375018 systemd[1]: Started logrotate.timer. Mar 17 18:18:40.376738 systemd[1]: Started mdadm.timer. Mar 17 18:18:40.378133 systemd[1]: Started systemd-tmpfiles-clean.timer. Mar 17 18:18:40.379875 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Mar 17 18:18:40.379937 systemd[1]: Reached target paths.target. Mar 17 18:18:40.381454 systemd[1]: Reached target timers.target. Mar 17 18:18:40.383706 systemd[1]: Listening on dbus.socket. Mar 17 18:18:40.387350 systemd[1]: Starting docker.socket... Mar 17 18:18:40.394360 systemd[1]: Listening on sshd.socket. Mar 17 18:18:40.397065 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:18:40.398499 systemd[1]: Listening on docker.socket. Mar 17 18:18:40.400584 systemd[1]: Reached target sockets.target. Mar 17 18:18:40.402522 systemd[1]: Reached target basic.target. Mar 17 18:18:40.404193 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:18:40.404400 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Mar 17 18:18:40.406861 systemd[1]: Started amazon-ssm-agent.service. Mar 17 18:18:40.411561 systemd[1]: Starting containerd.service... Mar 17 18:18:40.415823 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Mar 17 18:18:40.420813 systemd[1]: Starting dbus.service... Mar 17 18:18:40.424588 systemd[1]: Starting enable-oem-cloudinit.service... Mar 17 18:18:40.429742 systemd[1]: Starting extend-filesystems.service... Mar 17 18:18:40.431684 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Mar 17 18:18:40.436897 systemd[1]: Starting kubelet.service... Mar 17 18:18:40.442931 systemd[1]: Starting motdgen.service... Mar 17 18:18:40.448541 systemd[1]: Started nvidia.service. Mar 17 18:18:40.454418 systemd[1]: Starting prepare-helm.service... Mar 17 18:18:40.458901 jq[1797]: false Mar 17 18:18:40.459316 systemd[1]: Starting ssh-key-proc-cmdline.service... Mar 17 18:18:40.477969 systemd[1]: Starting sshd-keygen.service... Mar 17 18:18:40.484980 systemd[1]: Starting systemd-logind.service... Mar 17 18:18:40.488630 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Mar 17 18:18:40.488773 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Mar 17 18:18:40.490300 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Mar 17 18:18:40.491895 systemd[1]: Starting update-engine.service... Mar 17 18:18:40.495966 systemd[1]: Starting update-ssh-keys-after-ignition.service... Mar 17 18:18:40.504244 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Mar 17 18:18:40.505064 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Mar 17 18:18:40.545721 jq[1812]: true Mar 17 18:18:40.552986 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Mar 17 18:18:40.553422 systemd[1]: Finished ssh-key-proc-cmdline.service. Mar 17 18:18:40.556405 tar[1815]: linux-arm64/LICENSE Mar 17 18:18:40.556405 tar[1815]: linux-arm64/helm Mar 17 18:18:40.596004 jq[1822]: true Mar 17 18:18:40.702142 systemd[1]: motdgen.service: Deactivated successfully. Mar 17 18:18:40.702533 systemd[1]: Finished motdgen.service. Mar 17 18:18:40.719492 extend-filesystems[1798]: Found loop1 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1p1 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1p2 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1p3 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found usr Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1p4 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1p6 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1p7 Mar 17 18:18:40.721387 extend-filesystems[1798]: Found nvme0n1p9 Mar 17 18:18:40.721387 extend-filesystems[1798]: Checking size of /dev/nvme0n1p9 Mar 17 18:18:40.732856 dbus-daemon[1796]: [system] SELinux support is enabled Mar 17 18:18:40.733179 systemd[1]: Started dbus.service. Mar 17 18:18:40.771804 dbus-daemon[1796]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1536 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Mar 17 18:18:40.749070 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Mar 17 18:18:40.749120 systemd[1]: Reached target system-config.target. Mar 17 18:18:40.771573 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Mar 17 18:18:40.771630 systemd[1]: Reached target user-config.target. Mar 17 18:18:40.818560 dbus-daemon[1796]: [system] Successfully activated service 'org.freedesktop.systemd1' Mar 17 18:18:40.829415 systemd[1]: Starting systemd-hostnamed.service... Mar 17 18:18:40.880258 extend-filesystems[1798]: Resized partition /dev/nvme0n1p9 Mar 17 18:18:40.886095 extend-filesystems[1858]: resize2fs 1.46.5 (30-Dec-2021) Mar 17 18:18:40.931283 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Mar 17 18:18:41.017658 update_engine[1811]: I0317 18:18:40.977718 1811 main.cc:92] Flatcar Update Engine starting Mar 17 18:18:41.026304 amazon-ssm-agent[1793]: 2025/03/17 18:18:41 Failed to load instance info from vault. RegistrationKey does not exist. Mar 17 18:18:41.026304 amazon-ssm-agent[1793]: Initializing new seelog logger Mar 17 18:18:41.029811 amazon-ssm-agent[1793]: New Seelog Logger Creation Complete Mar 17 18:18:41.030123 amazon-ssm-agent[1793]: 2025/03/17 18:18:41 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Mar 17 18:18:41.030325 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Mar 17 18:18:41.059433 amazon-ssm-agent[1793]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Mar 17 18:18:41.051110 systemd[1]: Finished update-ssh-keys-after-ignition.service. Mar 17 18:18:41.059906 update_engine[1811]: I0317 18:18:41.044808 1811 update_check_scheduler.cc:74] Next update check in 10m52s Mar 17 18:18:41.059977 bash[1859]: Updated "/home/core/.ssh/authorized_keys" Mar 17 18:18:41.053563 systemd[1]: Started update-engine.service. Mar 17 18:18:41.060687 extend-filesystems[1858]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Mar 17 18:18:41.060687 extend-filesystems[1858]: old_desc_blocks = 1, new_desc_blocks = 1 Mar 17 18:18:41.060687 extend-filesystems[1858]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Mar 17 18:18:41.083969 extend-filesystems[1798]: Resized filesystem in /dev/nvme0n1p9 Mar 17 18:18:41.086870 env[1816]: time="2025-03-17T18:18:41.071951441Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Mar 17 18:18:41.063891 systemd[1]: Started locksmithd.service. Mar 17 18:18:41.087674 amazon-ssm-agent[1793]: 2025/03/17 18:18:41 processing appconfig overrides Mar 17 18:18:41.069166 systemd[1]: extend-filesystems.service: Deactivated successfully. Mar 17 18:18:41.070458 systemd[1]: Finished extend-filesystems.service. Mar 17 18:18:41.126570 systemd-logind[1810]: Watching system buttons on /dev/input/event0 (Power Button) Mar 17 18:18:41.133375 systemd-logind[1810]: Watching system buttons on /dev/input/event1 (Sleep Button) Mar 17 18:18:41.133961 systemd-logind[1810]: New seat seat0. Mar 17 18:18:41.138005 systemd[1]: Started systemd-logind.service. Mar 17 18:18:41.193507 systemd[1]: nvidia.service: Deactivated successfully. Mar 17 18:18:41.279581 dbus-daemon[1796]: [system] Successfully activated service 'org.freedesktop.hostname1' Mar 17 18:18:41.279839 systemd[1]: Started systemd-hostnamed.service. Mar 17 18:18:41.282960 dbus-daemon[1796]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1852 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Mar 17 18:18:41.286538 env[1816]: time="2025-03-17T18:18:41.286471374Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Mar 17 18:18:41.287006 env[1816]: time="2025-03-17T18:18:41.286954869Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:18:41.288398 systemd[1]: Starting polkit.service... Mar 17 18:18:41.295591 env[1816]: time="2025-03-17T18:18:41.295503469Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.179-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:18:41.303429 env[1816]: time="2025-03-17T18:18:41.303344620Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:18:41.304303 env[1816]: time="2025-03-17T18:18:41.304222577Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:18:41.306643 env[1816]: time="2025-03-17T18:18:41.306584413Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Mar 17 18:18:41.306867 env[1816]: time="2025-03-17T18:18:41.306826622Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Mar 17 18:18:41.306998 env[1816]: time="2025-03-17T18:18:41.306967603Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Mar 17 18:18:41.307509 env[1816]: time="2025-03-17T18:18:41.307448492Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:18:41.309006 env[1816]: time="2025-03-17T18:18:41.308949266Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Mar 17 18:18:41.310102 env[1816]: time="2025-03-17T18:18:41.310041937Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Mar 17 18:18:41.313390 env[1816]: time="2025-03-17T18:18:41.313329638Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Mar 17 18:18:41.313752 env[1816]: time="2025-03-17T18:18:41.313703439Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Mar 17 18:18:41.313946 env[1816]: time="2025-03-17T18:18:41.313911868Z" level=info msg="metadata content store policy set" policy=shared Mar 17 18:18:41.322923 polkitd[1890]: Started polkitd version 121 Mar 17 18:18:41.328294 env[1816]: time="2025-03-17T18:18:41.328132961Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.328234039Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.328509828Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.328588836Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.328627541Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.328664538Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.328697184Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.329375117Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.329432202Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.329464698Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.329495984Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.329530911Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.329807387Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Mar 17 18:18:41.330424 env[1816]: time="2025-03-17T18:18:41.329986238Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.331729321Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.331817468Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.331852483Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.331973201Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.332010672Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.332042906Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.332073643Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.332104979Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.332135804Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.332165195Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.332278 env[1816]: time="2025-03-17T18:18:41.332200172Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333286433Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333674112Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333729402Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333764355Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333795404Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333829146Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333856717Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333902754Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Mar 17 18:18:41.335607 env[1816]: time="2025-03-17T18:18:41.333979604Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Mar 17 18:18:41.336217 env[1816]: time="2025-03-17T18:18:41.334361223Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Mar 17 18:18:41.336217 env[1816]: time="2025-03-17T18:18:41.334473611Z" level=info msg="Connect containerd service" Mar 17 18:18:41.336217 env[1816]: time="2025-03-17T18:18:41.334539064Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Mar 17 18:18:41.340798 env[1816]: time="2025-03-17T18:18:41.337068067Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:18:41.341381 env[1816]: time="2025-03-17T18:18:41.341328107Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Mar 17 18:18:41.341911 env[1816]: time="2025-03-17T18:18:41.341834123Z" level=info msg=serving... address=/run/containerd/containerd.sock Mar 17 18:18:41.342286 env[1816]: time="2025-03-17T18:18:41.342211003Z" level=info msg="containerd successfully booted in 0.359897s" Mar 17 18:18:41.342469 systemd[1]: Started containerd.service. Mar 17 18:18:41.347883 env[1816]: time="2025-03-17T18:18:41.346937106Z" level=info msg="Start subscribing containerd event" Mar 17 18:18:41.350751 env[1816]: time="2025-03-17T18:18:41.350691144Z" level=info msg="Start recovering state" Mar 17 18:18:41.353709 env[1816]: time="2025-03-17T18:18:41.353652268Z" level=info msg="Start event monitor" Mar 17 18:18:41.355795 env[1816]: time="2025-03-17T18:18:41.355736107Z" level=info msg="Start snapshots syncer" Mar 17 18:18:41.356006 env[1816]: time="2025-03-17T18:18:41.355970572Z" level=info msg="Start cni network conf syncer for default" Mar 17 18:18:41.358724 polkitd[1890]: Loading rules from directory /etc/polkit-1/rules.d Mar 17 18:18:41.359161 env[1816]: time="2025-03-17T18:18:41.359107504Z" level=info msg="Start streaming server" Mar 17 18:18:41.359623 polkitd[1890]: Loading rules from directory /usr/share/polkit-1/rules.d Mar 17 18:18:41.363786 polkitd[1890]: Finished loading, compiling and executing 2 rules Mar 17 18:18:41.364782 dbus-daemon[1796]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Mar 17 18:18:41.365041 systemd[1]: Started polkit.service. Mar 17 18:18:41.367017 polkitd[1890]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Mar 17 18:18:41.402894 systemd-resolved[1762]: System hostname changed to 'ip-172-31-25-97'. Mar 17 18:18:41.402900 systemd-hostnamed[1852]: Hostname set to (transient) Mar 17 18:18:41.693855 coreos-metadata[1795]: Mar 17 18:18:41.693 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Mar 17 18:18:41.695868 coreos-metadata[1795]: Mar 17 18:18:41.695 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Mar 17 18:18:41.697263 coreos-metadata[1795]: Mar 17 18:18:41.697 INFO Fetch successful Mar 17 18:18:41.697263 coreos-metadata[1795]: Mar 17 18:18:41.697 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Mar 17 18:18:41.698584 coreos-metadata[1795]: Mar 17 18:18:41.698 INFO Fetch successful Mar 17 18:18:41.705014 unknown[1795]: wrote ssh authorized keys file for user: core Mar 17 18:18:41.734458 update-ssh-keys[1971]: Updated "/home/core/.ssh/authorized_keys" Mar 17 18:18:41.735595 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Mar 17 18:18:41.977493 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Create new startup processor Mar 17 18:18:41.991497 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [LongRunningPluginsManager] registered plugins: {} Mar 17 18:18:41.991497 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing bookkeeping folders Mar 17 18:18:41.991684 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO removing the completed state files Mar 17 18:18:41.991684 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing bookkeeping folders for long running plugins Mar 17 18:18:41.991684 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Mar 17 18:18:41.991684 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing healthcheck folders for long running plugins Mar 17 18:18:41.991684 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing locations for inventory plugin Mar 17 18:18:41.991684 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing default location for custom inventory Mar 17 18:18:41.991684 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing default location for file inventory Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Initializing default location for role inventory Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Init the cloudwatchlogs publisher Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:refreshAssociation Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:configurePackage Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:downloadContent Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:softwareInventory Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:updateSsmAgent Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:configureDocker Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:runDockerAction Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:runPowerShellScript Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform independent plugin aws:runDocument Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Successfully loaded platform dependent plugin aws:runShellScript Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Mar 17 18:18:41.992049 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO OS: linux, Arch: arm64 Mar 17 18:18:42.006870 amazon-ssm-agent[1793]: datastore file /var/lib/amazon/ssm/i-0485bb052fce4a071/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Mar 17 18:18:42.082939 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessageGatewayService] Starting session document processing engine... Mar 17 18:18:42.177913 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessageGatewayService] [EngineProcessor] Starting Mar 17 18:18:42.272347 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Mar 17 18:18:42.366831 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0485bb052fce4a071, requestId: 1337b2d6-96d5-4c86-a3d7-2d8084bc2826 Mar 17 18:18:42.461559 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] Starting document processing engine... Mar 17 18:18:42.548984 tar[1815]: linux-arm64/README.md Mar 17 18:18:42.556614 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] [EngineProcessor] Starting Mar 17 18:18:42.558955 systemd[1]: Finished prepare-helm.service. Mar 17 18:18:42.651804 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Mar 17 18:18:42.747152 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] Starting message polling Mar 17 18:18:42.776866 locksmithd[1878]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Mar 17 18:18:42.842737 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] Starting send replies to MDS Mar 17 18:18:42.938464 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [instanceID=i-0485bb052fce4a071] Starting association polling Mar 17 18:18:43.034426 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Mar 17 18:18:43.130711 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] [Association] Launching response handler Mar 17 18:18:43.227000 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Mar 17 18:18:43.323597 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Mar 17 18:18:43.420449 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Mar 17 18:18:43.517374 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [MessageGatewayService] listening reply. Mar 17 18:18:43.614457 amazon-ssm-agent[1793]: 2025-03-17 18:18:41 INFO [HealthCheck] HealthCheck reporting agent health. Mar 17 18:18:43.711923 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [OfflineService] Starting document processing engine... Mar 17 18:18:43.809468 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [OfflineService] [EngineProcessor] Starting Mar 17 18:18:43.907245 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [OfflineService] [EngineProcessor] Initial processing Mar 17 18:18:44.005179 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [OfflineService] Starting message polling Mar 17 18:18:44.103263 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [OfflineService] Starting send replies to MDS Mar 17 18:18:44.201646 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [LongRunningPluginsManager] starting long running plugin manager Mar 17 18:18:44.300568 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Mar 17 18:18:44.399221 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Mar 17 18:18:44.498183 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [StartupProcessor] Executing startup processor tasks Mar 17 18:18:44.597322 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Mar 17 18:18:44.696591 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Mar 17 18:18:44.796044 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.7 Mar 17 18:18:44.895916 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0485bb052fce4a071?role=subscribe&stream=input Mar 17 18:18:44.935186 systemd[1]: Started kubelet.service. Mar 17 18:18:44.995708 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0485bb052fce4a071?role=subscribe&stream=input Mar 17 18:18:45.095829 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [MessageGatewayService] Starting receiving message from control channel Mar 17 18:18:45.196098 amazon-ssm-agent[1793]: 2025-03-17 18:18:42 INFO [MessageGatewayService] [EngineProcessor] Initial processing Mar 17 18:18:46.306634 kubelet[2007]: E0317 18:18:46.306562 2007 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:18:46.311565 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:18:46.311922 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:18:46.312512 systemd[1]: kubelet.service: Consumed 1.514s CPU time. Mar 17 18:18:48.585722 sshd_keygen[1834]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Mar 17 18:18:48.622006 systemd[1]: Finished sshd-keygen.service. Mar 17 18:18:48.626726 systemd[1]: Starting issuegen.service... Mar 17 18:18:48.637929 systemd[1]: issuegen.service: Deactivated successfully. Mar 17 18:18:48.638322 systemd[1]: Finished issuegen.service. Mar 17 18:18:48.643513 systemd[1]: Starting systemd-user-sessions.service... Mar 17 18:18:48.661868 systemd[1]: Finished systemd-user-sessions.service. Mar 17 18:18:48.666536 systemd[1]: Started getty@tty1.service. Mar 17 18:18:48.670981 systemd[1]: Started serial-getty@ttyS0.service. Mar 17 18:18:48.673153 systemd[1]: Reached target getty.target. Mar 17 18:18:48.675175 systemd[1]: Reached target multi-user.target. Mar 17 18:18:48.679831 systemd[1]: Starting systemd-update-utmp-runlevel.service... Mar 17 18:18:48.698887 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Mar 17 18:18:48.699332 systemd[1]: Finished systemd-update-utmp-runlevel.service. Mar 17 18:18:48.701595 systemd[1]: Startup finished in 1.151s (kernel) + 8.855s (initrd) + 17.251s (userspace) = 27.257s. Mar 17 18:18:49.318531 systemd[1]: Created slice system-sshd.slice. Mar 17 18:18:49.320922 systemd[1]: Started sshd@0-172.31.25.97:22-139.178.89.65:38488.service. Mar 17 18:18:49.575737 sshd[2028]: Accepted publickey for core from 139.178.89.65 port 38488 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:18:49.581354 sshd[2028]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:49.604584 systemd[1]: Created slice user-500.slice. Mar 17 18:18:49.607342 systemd[1]: Starting user-runtime-dir@500.service... Mar 17 18:18:49.617067 systemd-logind[1810]: New session 1 of user core. Mar 17 18:18:49.628451 systemd[1]: Finished user-runtime-dir@500.service. Mar 17 18:18:49.632051 systemd[1]: Starting user@500.service... Mar 17 18:18:49.641101 (systemd)[2031]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:49.838358 systemd[2031]: Queued start job for default target default.target. Mar 17 18:18:49.841130 systemd[2031]: Reached target paths.target. Mar 17 18:18:49.841475 systemd[2031]: Reached target sockets.target. Mar 17 18:18:49.841678 systemd[2031]: Reached target timers.target. Mar 17 18:18:49.841872 systemd[2031]: Reached target basic.target. Mar 17 18:18:49.842147 systemd[2031]: Reached target default.target. Mar 17 18:18:49.842276 systemd[1]: Started user@500.service. Mar 17 18:18:49.843278 systemd[2031]: Startup finished in 189ms. Mar 17 18:18:49.844974 systemd[1]: Started session-1.scope. Mar 17 18:18:49.994693 amazon-ssm-agent[1793]: 2025-03-17 18:18:49 INFO [HealthCheck] HealthCheck reporting agent health. Mar 17 18:18:50.001615 systemd[1]: Started sshd@1-172.31.25.97:22-139.178.89.65:38502.service. Mar 17 18:18:50.184930 sshd[2041]: Accepted publickey for core from 139.178.89.65 port 38502 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:18:50.188059 sshd[2041]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:50.197358 systemd-logind[1810]: New session 2 of user core. Mar 17 18:18:50.198021 systemd[1]: Started session-2.scope. Mar 17 18:18:50.332525 sshd[2041]: pam_unix(sshd:session): session closed for user core Mar 17 18:18:50.337888 systemd-logind[1810]: Session 2 logged out. Waiting for processes to exit. Mar 17 18:18:50.338308 systemd[1]: sshd@1-172.31.25.97:22-139.178.89.65:38502.service: Deactivated successfully. Mar 17 18:18:50.339546 systemd[1]: session-2.scope: Deactivated successfully. Mar 17 18:18:50.340864 systemd-logind[1810]: Removed session 2. Mar 17 18:18:50.361376 systemd[1]: Started sshd@2-172.31.25.97:22-139.178.89.65:38508.service. Mar 17 18:18:50.540990 sshd[2047]: Accepted publickey for core from 139.178.89.65 port 38508 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:18:50.543957 sshd[2047]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:50.553058 systemd[1]: Started session-3.scope. Mar 17 18:18:50.553851 systemd-logind[1810]: New session 3 of user core. Mar 17 18:18:50.677878 sshd[2047]: pam_unix(sshd:session): session closed for user core Mar 17 18:18:50.683071 systemd[1]: sshd@2-172.31.25.97:22-139.178.89.65:38508.service: Deactivated successfully. Mar 17 18:18:50.684442 systemd[1]: session-3.scope: Deactivated successfully. Mar 17 18:18:50.686991 systemd-logind[1810]: Session 3 logged out. Waiting for processes to exit. Mar 17 18:18:50.688973 systemd-logind[1810]: Removed session 3. Mar 17 18:18:50.705671 systemd[1]: Started sshd@3-172.31.25.97:22-139.178.89.65:38516.service. Mar 17 18:18:50.884725 sshd[2053]: Accepted publickey for core from 139.178.89.65 port 38516 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:18:50.887745 sshd[2053]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:50.895892 systemd-logind[1810]: New session 4 of user core. Mar 17 18:18:50.897066 systemd[1]: Started session-4.scope. Mar 17 18:18:51.027858 sshd[2053]: pam_unix(sshd:session): session closed for user core Mar 17 18:18:51.032927 systemd-logind[1810]: Session 4 logged out. Waiting for processes to exit. Mar 17 18:18:51.034009 systemd[1]: sshd@3-172.31.25.97:22-139.178.89.65:38516.service: Deactivated successfully. Mar 17 18:18:51.035301 systemd[1]: session-4.scope: Deactivated successfully. Mar 17 18:18:51.036786 systemd-logind[1810]: Removed session 4. Mar 17 18:18:51.056182 systemd[1]: Started sshd@4-172.31.25.97:22-139.178.89.65:43192.service. Mar 17 18:18:51.232062 sshd[2059]: Accepted publickey for core from 139.178.89.65 port 43192 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:18:51.234787 sshd[2059]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:51.242944 systemd-logind[1810]: New session 5 of user core. Mar 17 18:18:51.243919 systemd[1]: Started session-5.scope. Mar 17 18:18:51.389424 sudo[2062]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Mar 17 18:18:51.389977 sudo[2062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:18:51.411494 dbus-daemon[1796]: avc: received setenforce notice (enforcing=1) Mar 17 18:18:51.412762 sudo[2062]: pam_unix(sudo:session): session closed for user root Mar 17 18:18:51.437853 sshd[2059]: pam_unix(sshd:session): session closed for user core Mar 17 18:18:51.442610 systemd[1]: session-5.scope: Deactivated successfully. Mar 17 18:18:51.443766 systemd[1]: sshd@4-172.31.25.97:22-139.178.89.65:43192.service: Deactivated successfully. Mar 17 18:18:51.445612 systemd-logind[1810]: Session 5 logged out. Waiting for processes to exit. Mar 17 18:18:51.447720 systemd-logind[1810]: Removed session 5. Mar 17 18:18:51.466199 systemd[1]: Started sshd@5-172.31.25.97:22-139.178.89.65:43204.service. Mar 17 18:18:51.644012 sshd[2066]: Accepted publickey for core from 139.178.89.65 port 43204 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:18:51.646529 sshd[2066]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:51.655286 systemd[1]: Started session-6.scope. Mar 17 18:18:51.656176 systemd-logind[1810]: New session 6 of user core. Mar 17 18:18:51.763828 sudo[2070]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Mar 17 18:18:51.764405 sudo[2070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:18:51.769665 sudo[2070]: pam_unix(sudo:session): session closed for user root Mar 17 18:18:51.779368 sudo[2069]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Mar 17 18:18:51.780435 sudo[2069]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:18:51.798044 systemd[1]: Stopping audit-rules.service... Mar 17 18:18:51.798000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:18:51.802019 kernel: kauditd_printk_skb: 112 callbacks suppressed Mar 17 18:18:51.802117 kernel: audit: type=1305 audit(1742235531.798:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Mar 17 18:18:51.802361 auditctl[2073]: No rules Mar 17 18:18:51.807466 systemd[1]: audit-rules.service: Deactivated successfully. Mar 17 18:18:51.798000 audit[2073]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffec610910 a2=420 a3=0 items=0 ppid=1 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:51.819964 kernel: audit: type=1300 audit(1742235531.798:205): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffec610910 a2=420 a3=0 items=0 ppid=1 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:51.820067 kernel: audit: type=1327 audit(1742235531.798:205): proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:18:51.798000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Mar 17 18:18:51.807985 systemd[1]: Stopped audit-rules.service. Mar 17 18:18:51.818322 systemd[1]: Starting audit-rules.service... Mar 17 18:18:51.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.830122 kernel: audit: type=1131 audit(1742235531.806:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.850254 augenrules[2090]: No rules Mar 17 18:18:51.851815 systemd[1]: Finished audit-rules.service. Mar 17 18:18:51.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.854584 sudo[2069]: pam_unix(sudo:session): session closed for user root Mar 17 18:18:51.853000 audit[2069]: USER_END pid=2069 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.868646 kernel: audit: type=1130 audit(1742235531.851:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.868708 kernel: audit: type=1106 audit(1742235531.853:208): pid=2069 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.868768 kernel: audit: type=1104 audit(1742235531.853:209): pid=2069 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.853000 audit[2069]: CRED_DISP pid=2069 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.878984 sshd[2066]: pam_unix(sshd:session): session closed for user core Mar 17 18:18:51.880000 audit[2066]: USER_END pid=2066 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:51.880000 audit[2066]: CRED_DISP pid=2066 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:51.893888 systemd[1]: sshd@5-172.31.25.97:22-139.178.89.65:43204.service: Deactivated successfully. Mar 17 18:18:51.895110 systemd[1]: session-6.scope: Deactivated successfully. Mar 17 18:18:51.901958 kernel: audit: type=1106 audit(1742235531.880:210): pid=2066 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:51.902031 kernel: audit: type=1104 audit(1742235531.880:211): pid=2066 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:51.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.97:22-139.178.89.65:43204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.913266 kernel: audit: type=1131 audit(1742235531.892:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.97:22-139.178.89.65:43204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.911116 systemd[1]: Started sshd@6-172.31.25.97:22-139.178.89.65:43218.service. Mar 17 18:18:51.914186 systemd-logind[1810]: Session 6 logged out. Waiting for processes to exit. Mar 17 18:18:51.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.97:22-139.178.89.65:43218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:51.917429 systemd-logind[1810]: Removed session 6. Mar 17 18:18:52.088000 audit[2096]: USER_ACCT pid=2096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:52.090016 sshd[2096]: Accepted publickey for core from 139.178.89.65 port 43218 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:18:52.090000 audit[2096]: CRED_ACQ pid=2096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:52.090000 audit[2096]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7c4f3c0 a2=3 a3=1 items=0 ppid=1 pid=2096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:18:52.092989 sshd[2096]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:18:52.101364 systemd-logind[1810]: New session 7 of user core. Mar 17 18:18:52.101576 systemd[1]: Started session-7.scope. Mar 17 18:18:52.110000 audit[2096]: USER_START pid=2096 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:52.112000 audit[2098]: CRED_ACQ pid=2098 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:18:52.208000 audit[2099]: USER_ACCT pid=2099 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:18:52.210660 sudo[2099]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Mar 17 18:18:52.209000 audit[2099]: CRED_REFR pid=2099 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:18:52.211299 sudo[2099]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Mar 17 18:18:52.213000 audit[2099]: USER_START pid=2099 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:18:52.259263 systemd[1]: Starting docker.service... Mar 17 18:18:52.339440 env[2109]: time="2025-03-17T18:18:52.339351226Z" level=info msg="Starting up" Mar 17 18:18:52.343008 env[2109]: time="2025-03-17T18:18:52.342960503Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:18:52.343186 env[2109]: time="2025-03-17T18:18:52.343156981Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:18:52.343375 env[2109]: time="2025-03-17T18:18:52.343343082Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:18:52.343497 env[2109]: time="2025-03-17T18:18:52.343470290Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:18:52.346544 env[2109]: time="2025-03-17T18:18:52.346497300Z" level=info msg="parsed scheme: \"unix\"" module=grpc Mar 17 18:18:52.346544 env[2109]: time="2025-03-17T18:18:52.346535949Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Mar 17 18:18:52.346758 env[2109]: time="2025-03-17T18:18:52.346584273Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Mar 17 18:18:52.346758 env[2109]: time="2025-03-17T18:18:52.346612969Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Mar 17 18:18:52.357764 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport716181627-merged.mount: Deactivated successfully. Mar 17 18:18:52.397403 env[2109]: time="2025-03-17T18:18:52.397355167Z" level=info msg="Loading containers: start." Mar 17 18:18:52.507000 audit[2140]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.507000 audit[2140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd144c460 a2=0 a3=1 items=0 ppid=2109 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.507000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Mar 17 18:18:52.513000 audit[2142]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.513000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffffe3974d0 a2=0 a3=1 items=0 ppid=2109 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.513000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Mar 17 18:18:52.518000 audit[2144]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.518000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc6ec0bc0 a2=0 a3=1 items=0 ppid=2109 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.518000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:18:52.522000 audit[2146]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.522000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd0a63e80 a2=0 a3=1 items=0 ppid=2109 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.522000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:18:52.529000 audit[2148]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.529000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffff64feb0 a2=0 a3=1 items=0 ppid=2109 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.529000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Mar 17 18:18:52.556000 audit[2153]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.556000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd3c6af10 a2=0 a3=1 items=0 ppid=2109 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.556000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Mar 17 18:18:52.568000 audit[2155]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.568000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffcf8fc60 a2=0 a3=1 items=0 ppid=2109 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.568000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Mar 17 18:18:52.573000 audit[2157]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.573000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe135a070 a2=0 a3=1 items=0 ppid=2109 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.573000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Mar 17 18:18:52.577000 audit[2159]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.577000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffde3ab5d0 a2=0 a3=1 items=0 ppid=2109 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.577000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:18:52.591000 audit[2163]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.591000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc8c39430 a2=0 a3=1 items=0 ppid=2109 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.591000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:18:52.597000 audit[2164]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.597000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff11d5830 a2=0 a3=1 items=0 ppid=2109 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.597000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:18:52.616259 kernel: Initializing XFRM netlink socket Mar 17 18:18:52.661773 env[2109]: time="2025-03-17T18:18:52.661726384Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Mar 17 18:18:52.663437 (udev-worker)[2120]: Network interface NamePolicy= disabled on kernel command line. Mar 17 18:18:52.698000 audit[2172]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.698000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc1ac44a0 a2=0 a3=1 items=0 ppid=2109 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.698000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Mar 17 18:18:52.710000 audit[2175]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.710000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff6d936e0 a2=0 a3=1 items=0 ppid=2109 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.710000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Mar 17 18:18:52.716000 audit[2178]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.716000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc2d70660 a2=0 a3=1 items=0 ppid=2109 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.716000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Mar 17 18:18:52.720000 audit[2180]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.720000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc387cf10 a2=0 a3=1 items=0 ppid=2109 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.720000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Mar 17 18:18:52.724000 audit[2182]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.724000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd6a90f50 a2=0 a3=1 items=0 ppid=2109 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.724000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Mar 17 18:18:52.728000 audit[2184]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.728000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd7ae0d10 a2=0 a3=1 items=0 ppid=2109 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.728000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Mar 17 18:18:52.732000 audit[2186]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.732000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcf139130 a2=0 a3=1 items=0 ppid=2109 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.732000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Mar 17 18:18:52.749000 audit[2189]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.749000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffefbf5280 a2=0 a3=1 items=0 ppid=2109 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.749000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Mar 17 18:18:52.755000 audit[2191]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.755000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffece569a0 a2=0 a3=1 items=0 ppid=2109 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.755000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Mar 17 18:18:52.761000 audit[2193]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.761000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffccabec50 a2=0 a3=1 items=0 ppid=2109 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.761000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Mar 17 18:18:52.767000 audit[2195]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.767000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff7a7f1d0 a2=0 a3=1 items=0 ppid=2109 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.767000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Mar 17 18:18:52.769938 systemd-networkd[1536]: docker0: Link UP Mar 17 18:18:52.783000 audit[2199]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.783000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe9b59d70 a2=0 a3=1 items=0 ppid=2109 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.783000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:18:52.790000 audit[2200]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:18:52.790000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffbacbf40 a2=0 a3=1 items=0 ppid=2109 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:18:52.790000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Mar 17 18:18:52.793156 env[2109]: time="2025-03-17T18:18:52.793093268Z" level=info msg="Loading containers: done." Mar 17 18:18:52.814312 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1182079248-merged.mount: Deactivated successfully. Mar 17 18:18:52.829584 env[2109]: time="2025-03-17T18:18:52.829519816Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Mar 17 18:18:52.830257 env[2109]: time="2025-03-17T18:18:52.830197893Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Mar 17 18:18:52.830642 env[2109]: time="2025-03-17T18:18:52.830604858Z" level=info msg="Daemon has completed initialization" Mar 17 18:18:52.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:52.854583 systemd[1]: Started docker.service. Mar 17 18:18:52.867621 env[2109]: time="2025-03-17T18:18:52.867526554Z" level=info msg="API listen on /run/docker.sock" Mar 17 18:18:54.358411 env[1816]: time="2025-03-17T18:18:54.358298166Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.3\"" Mar 17 18:18:54.996976 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1636822628.mount: Deactivated successfully. Mar 17 18:18:56.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:56.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:56.563402 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Mar 17 18:18:56.563728 systemd[1]: Stopped kubelet.service. Mar 17 18:18:56.563854 systemd[1]: kubelet.service: Consumed 1.514s CPU time. Mar 17 18:18:56.566417 systemd[1]: Starting kubelet.service... Mar 17 18:18:56.779924 env[1816]: time="2025-03-17T18:18:56.779822146Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:56.783541 env[1816]: time="2025-03-17T18:18:56.783468236Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:25dd33975ea35cef2fa9b105778dbe3369de267e9ddf81427b7b82e98ff374e5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:56.791584 env[1816]: time="2025-03-17T18:18:56.791516018Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:56.798125 env[1816]: time="2025-03-17T18:18:56.798048304Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.3\" returns image reference \"sha256:25dd33975ea35cef2fa9b105778dbe3369de267e9ddf81427b7b82e98ff374e5\"" Mar 17 18:18:56.798711 env[1816]: time="2025-03-17T18:18:56.798412593Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:279e45cf07e4f56925c3c5237179eb63616788426a96e94df5fedf728b18926e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:56.798982 env[1816]: time="2025-03-17T18:18:56.798930545Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.3\"" Mar 17 18:18:56.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:56.896241 systemd[1]: Started kubelet.service. Mar 17 18:18:56.898567 kernel: kauditd_printk_skb: 86 callbacks suppressed Mar 17 18:18:56.898666 kernel: audit: type=1130 audit(1742235536.896:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:18:56.983901 kubelet[2235]: E0317 18:18:56.983808 2235 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:18:56.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:18:56.992274 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:18:56.992583 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:18:57.000249 kernel: audit: type=1131 audit(1742235536.991:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:18:59.364099 env[1816]: time="2025-03-17T18:18:59.364035413Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:59.366742 env[1816]: time="2025-03-17T18:18:59.366682656Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e29b4db8c5cdf9970961ed3a47137ea71ad067643b8e5cccb58085f22a9b315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:59.370053 env[1816]: time="2025-03-17T18:18:59.369982648Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:59.374285 env[1816]: time="2025-03-17T18:18:59.374224708Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:54456a96a1bbdc35dcc2e70fcc1355bf655af67694e40b650ac12e83521f6411,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:18:59.375950 env[1816]: time="2025-03-17T18:18:59.375898680Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.3\" returns image reference \"sha256:9e29b4db8c5cdf9970961ed3a47137ea71ad067643b8e5cccb58085f22a9b315\"" Mar 17 18:18:59.376693 env[1816]: time="2025-03-17T18:18:59.376647624Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.3\"" Mar 17 18:19:01.521821 env[1816]: time="2025-03-17T18:19:01.521749476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:01.527355 env[1816]: time="2025-03-17T18:19:01.527290538Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6b8dfebcc65dc9d4765a91d2923c304e13beca7111c57dfc99f1c3267a6e9f30,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:01.530405 env[1816]: time="2025-03-17T18:19:01.530343821Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:01.535183 env[1816]: time="2025-03-17T18:19:01.535136256Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:aafae2e3a8d65bc6dc3a0c6095c24bc72b1ff608e1417f0f5e860ce4a61c27df,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:01.538310 env[1816]: time="2025-03-17T18:19:01.537615240Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.3\" returns image reference \"sha256:6b8dfebcc65dc9d4765a91d2923c304e13beca7111c57dfc99f1c3267a6e9f30\"" Mar 17 18:19:01.539072 env[1816]: time="2025-03-17T18:19:01.538988629Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.3\"" Mar 17 18:19:03.066297 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2455922379.mount: Deactivated successfully. Mar 17 18:19:03.960597 env[1816]: time="2025-03-17T18:19:03.960516883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:03.963968 env[1816]: time="2025-03-17T18:19:03.963895129Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2a637602f3e88e76046aa1a75bccdb37b25b2fcba99a380412e2c27ccd55c547,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:03.966010 env[1816]: time="2025-03-17T18:19:03.965952045Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:03.969297 env[1816]: time="2025-03-17T18:19:03.968726149Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:5015269547a0b7dd2c062758e9a64467b58978ff2502cad4c3f5cdf4aa554ad3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:03.970371 env[1816]: time="2025-03-17T18:19:03.970315033Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.3\" returns image reference \"sha256:2a637602f3e88e76046aa1a75bccdb37b25b2fcba99a380412e2c27ccd55c547\"" Mar 17 18:19:03.971235 env[1816]: time="2025-03-17T18:19:03.971162378Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Mar 17 18:19:04.564967 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1283805464.mount: Deactivated successfully. Mar 17 18:19:06.158470 env[1816]: time="2025-03-17T18:19:06.158391362Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.161365 env[1816]: time="2025-03-17T18:19:06.161302124Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.165095 env[1816]: time="2025-03-17T18:19:06.165024143Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.169984 env[1816]: time="2025-03-17T18:19:06.169930669Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.171672 env[1816]: time="2025-03-17T18:19:06.171624166Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Mar 17 18:19:06.172549 env[1816]: time="2025-03-17T18:19:06.172481459Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Mar 17 18:19:06.621499 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount370488356.mount: Deactivated successfully. Mar 17 18:19:06.634261 env[1816]: time="2025-03-17T18:19:06.634171615Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.636455 env[1816]: time="2025-03-17T18:19:06.636394170Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.638940 env[1816]: time="2025-03-17T18:19:06.638885033Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.641641 env[1816]: time="2025-03-17T18:19:06.641594023Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:06.642840 env[1816]: time="2025-03-17T18:19:06.642794428Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Mar 17 18:19:06.643741 env[1816]: time="2025-03-17T18:19:06.643700100Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Mar 17 18:19:07.172362 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Mar 17 18:19:07.172669 systemd[1]: Stopped kubelet.service. Mar 17 18:19:07.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:07.186735 kernel: audit: type=1130 audit(1742235547.172:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:07.186840 kernel: audit: type=1131 audit(1742235547.178:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:07.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:07.188691 systemd[1]: Starting kubelet.service... Mar 17 18:19:07.234469 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount6297799.mount: Deactivated successfully. Mar 17 18:19:07.404425 amazon-ssm-agent[1793]: 2025-03-17 18:19:07 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Mar 17 18:19:07.514749 systemd[1]: Started kubelet.service. Mar 17 18:19:07.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:07.525237 kernel: audit: type=1130 audit(1742235547.514:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:07.664329 kubelet[2245]: E0317 18:19:07.664268 2245 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Mar 17 18:19:07.668481 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Mar 17 18:19:07.668804 systemd[1]: kubelet.service: Failed with result 'exit-code'. Mar 17 18:19:07.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:19:07.677244 kernel: audit: type=1131 audit(1742235547.668:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:19:11.181994 env[1816]: time="2025-03-17T18:19:11.181934414Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:11.186439 env[1816]: time="2025-03-17T18:19:11.186388012Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:11.190251 env[1816]: time="2025-03-17T18:19:11.190172879Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:11.193804 env[1816]: time="2025-03-17T18:19:11.193755630Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:11.195641 env[1816]: time="2025-03-17T18:19:11.195595808Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Mar 17 18:19:11.436489 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Mar 17 18:19:11.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:11.445247 kernel: audit: type=1131 audit(1742235551.436:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:11.459000 audit: BPF prog-id=43 op=UNLOAD Mar 17 18:19:11.459000 audit: BPF prog-id=42 op=UNLOAD Mar 17 18:19:11.464167 kernel: audit: type=1334 audit(1742235551.459:256): prog-id=43 op=UNLOAD Mar 17 18:19:11.464276 kernel: audit: type=1334 audit(1742235551.459:257): prog-id=42 op=UNLOAD Mar 17 18:19:11.464333 kernel: audit: type=1334 audit(1742235551.459:258): prog-id=41 op=UNLOAD Mar 17 18:19:11.459000 audit: BPF prog-id=41 op=UNLOAD Mar 17 18:19:17.847578 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Mar 17 18:19:17.849296 systemd[1]: Stopped kubelet.service. Mar 17 18:19:17.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:17.855532 systemd[1]: Starting kubelet.service... Mar 17 18:19:17.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:17.866130 kernel: audit: type=1130 audit(1742235557.848:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:17.866284 kernel: audit: type=1131 audit(1742235557.848:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:17.884414 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Mar 17 18:19:17.884602 systemd[1]: kubelet.service: Failed with result 'signal'. Mar 17 18:19:17.886096 systemd[1]: Stopped kubelet.service. Mar 17 18:19:17.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:19:17.890484 systemd[1]: Starting kubelet.service... Mar 17 18:19:17.896241 kernel: audit: type=1130 audit(1742235557.885:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Mar 17 18:19:17.944022 systemd[1]: Reloading. Mar 17 18:19:18.102382 /usr/lib/systemd/system-generators/torcx-generator[2298]: time="2025-03-17T18:19:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:19:18.111368 /usr/lib/systemd/system-generators/torcx-generator[2298]: time="2025-03-17T18:19:18Z" level=info msg="torcx already run" Mar 17 18:19:18.309484 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:19:18.309683 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:19:18.347821 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:19:18.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.518215 kernel: audit: type=1400 audit(1742235558.502:262): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.518313 kernel: audit: type=1400 audit(1742235558.510:263): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.518368 kernel: audit: type=1400 audit(1742235558.510:264): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.532051 kernel: audit: type=1400 audit(1742235558.510:265): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.532155 kernel: audit: type=1400 audit(1742235558.510:266): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.545940 kernel: audit: type=1400 audit(1742235558.510:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.546044 kernel: audit: type=1400 audit(1742235558.510:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit: BPF prog-id=46 op=LOAD Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.517000 audit: BPF prog-id=47 op=LOAD Mar 17 18:19:18.517000 audit: BPF prog-id=27 op=UNLOAD Mar 17 18:19:18.517000 audit: BPF prog-id=28 op=UNLOAD Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.524000 audit: BPF prog-id=48 op=LOAD Mar 17 18:19:18.524000 audit: BPF prog-id=44 op=UNLOAD Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.531000 audit: BPF prog-id=49 op=LOAD Mar 17 18:19:18.531000 audit: BPF prog-id=29 op=UNLOAD Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.537000 audit: BPF prog-id=50 op=LOAD Mar 17 18:19:18.538000 audit: BPF prog-id=30 op=UNLOAD Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.544000 audit: BPF prog-id=51 op=LOAD Mar 17 18:19:18.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.554000 audit: BPF prog-id=52 op=LOAD Mar 17 18:19:18.554000 audit: BPF prog-id=31 op=UNLOAD Mar 17 18:19:18.554000 audit: BPF prog-id=32 op=UNLOAD Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.558000 audit: BPF prog-id=53 op=LOAD Mar 17 18:19:18.558000 audit: BPF prog-id=37 op=UNLOAD Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit: BPF prog-id=54 op=LOAD Mar 17 18:19:18.559000 audit: BPF prog-id=33 op=UNLOAD Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit: BPF prog-id=55 op=LOAD Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.559000 audit: BPF prog-id=56 op=LOAD Mar 17 18:19:18.560000 audit: BPF prog-id=34 op=UNLOAD Mar 17 18:19:18.560000 audit: BPF prog-id=35 op=UNLOAD Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.562000 audit: BPF prog-id=57 op=LOAD Mar 17 18:19:18.562000 audit: BPF prog-id=36 op=UNLOAD Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit: BPF prog-id=58 op=LOAD Mar 17 18:19:18.565000 audit: BPF prog-id=38 op=UNLOAD Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit: BPF prog-id=59 op=LOAD Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:18.566000 audit: BPF prog-id=60 op=LOAD Mar 17 18:19:18.566000 audit: BPF prog-id=39 op=UNLOAD Mar 17 18:19:18.566000 audit: BPF prog-id=40 op=UNLOAD Mar 17 18:19:18.608738 systemd[1]: Started kubelet.service. Mar 17 18:19:18.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:18.613895 systemd[1]: Stopping kubelet.service... Mar 17 18:19:18.615184 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:19:18.615587 systemd[1]: Stopped kubelet.service. Mar 17 18:19:18.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:18.619901 systemd[1]: Starting kubelet.service... Mar 17 18:19:18.922527 systemd[1]: Started kubelet.service. Mar 17 18:19:18.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:19.014599 kubelet[2361]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:19:19.014599 kubelet[2361]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Mar 17 18:19:19.014599 kubelet[2361]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:19:19.015369 kubelet[2361]: I0317 18:19:19.015292 2361 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:19:19.813292 kubelet[2361]: I0317 18:19:19.813195 2361 server.go:520] "Kubelet version" kubeletVersion="v1.32.0" Mar 17 18:19:19.813292 kubelet[2361]: I0317 18:19:19.813278 2361 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:19:19.814132 kubelet[2361]: I0317 18:19:19.814080 2361 server.go:954] "Client rotation is on, will bootstrap in background" Mar 17 18:19:19.909502 kubelet[2361]: E0317 18:19:19.909453 2361 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.25.97:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:19.911617 kubelet[2361]: I0317 18:19:19.911556 2361 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:19:19.930439 kubelet[2361]: E0317 18:19:19.930366 2361 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:19:19.930439 kubelet[2361]: I0317 18:19:19.930432 2361 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:19:19.935067 kubelet[2361]: I0317 18:19:19.935017 2361 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:19:19.935572 kubelet[2361]: I0317 18:19:19.935508 2361 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:19:19.935851 kubelet[2361]: I0317 18:19:19.935565 2361 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-25-97","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:19:19.936043 kubelet[2361]: I0317 18:19:19.935881 2361 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:19:19.936043 kubelet[2361]: I0317 18:19:19.935903 2361 container_manager_linux.go:304] "Creating device plugin manager" Mar 17 18:19:19.936166 kubelet[2361]: I0317 18:19:19.936125 2361 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:19:19.942874 kubelet[2361]: I0317 18:19:19.942820 2361 kubelet.go:446] "Attempting to sync node with API server" Mar 17 18:19:19.942874 kubelet[2361]: I0317 18:19:19.942872 2361 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:19:19.943079 kubelet[2361]: I0317 18:19:19.942907 2361 kubelet.go:352] "Adding apiserver pod source" Mar 17 18:19:19.943079 kubelet[2361]: I0317 18:19:19.942930 2361 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:19:19.947846 kubelet[2361]: W0317 18:19:19.947472 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.25.97:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:19.947846 kubelet[2361]: E0317 18:19:19.947569 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.25.97:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:19.949483 kubelet[2361]: W0317 18:19:19.949418 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.25.97:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-97&limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:19.949734 kubelet[2361]: E0317 18:19:19.949699 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.25.97:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-97&limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:19.950010 kubelet[2361]: I0317 18:19:19.949982 2361 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:19:19.950941 kubelet[2361]: I0317 18:19:19.950910 2361 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:19:19.951175 kubelet[2361]: W0317 18:19:19.951155 2361 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Mar 17 18:19:19.958305 kubelet[2361]: I0317 18:19:19.958269 2361 watchdog_linux.go:99] "Systemd watchdog is not enabled" Mar 17 18:19:19.958548 kubelet[2361]: I0317 18:19:19.958527 2361 server.go:1287] "Started kubelet" Mar 17 18:19:19.968463 kubelet[2361]: I0317 18:19:19.968375 2361 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:19:19.970019 kubelet[2361]: I0317 18:19:19.969971 2361 server.go:490] "Adding debug handlers to kubelet server" Mar 17 18:19:19.973417 kubelet[2361]: I0317 18:19:19.973316 2361 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:19:19.975824 kubelet[2361]: I0317 18:19:19.975753 2361 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:19:19.976385 kubelet[2361]: E0317 18:19:19.976112 2361 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.25.97:6443/api/v1/namespaces/default/events\": dial tcp 172.31.25.97:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-25-97.182daa02d26135c7 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-25-97,UID:ip-172-31-25-97,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-25-97,},FirstTimestamp:2025-03-17 18:19:19.958492615 +0000 UTC m=+1.025166677,LastTimestamp:2025-03-17 18:19:19.958492615 +0000 UTC m=+1.025166677,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-25-97,}" Mar 17 18:19:19.979000 audit[2361]: AVC avc: denied { mac_admin } for pid=2361 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:19.979000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:19:19.979000 audit[2361]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c4c930 a1=4000c20858 a2=4000c4c900 a3=25 items=0 ppid=1 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:19.979000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:19:19.980000 audit[2361]: AVC avc: denied { mac_admin } for pid=2361 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:19.980000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:19:19.980000 audit[2361]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c661a0 a1=4000c20870 a2=4000c4c9c0 a3=25 items=0 ppid=1 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:19.980000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:19:19.981956 kubelet[2361]: I0317 18:19:19.981276 2361 kubelet.go:1513] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:19:19.981956 kubelet[2361]: I0317 18:19:19.981401 2361 kubelet.go:1517] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Mar 17 18:19:19.981956 kubelet[2361]: I0317 18:19:19.981551 2361 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:19:19.985903 kubelet[2361]: I0317 18:19:19.985852 2361 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:19:19.989050 kubelet[2361]: I0317 18:19:19.987884 2361 volume_manager.go:297] "Starting Kubelet Volume Manager" Mar 17 18:19:19.989050 kubelet[2361]: E0317 18:19:19.988797 2361 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"ip-172-31-25-97\" not found" Mar 17 18:19:19.990627 kubelet[2361]: I0317 18:19:19.990576 2361 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:19:19.990819 kubelet[2361]: E0317 18:19:19.990765 2361 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.97:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-97?timeout=10s\": dial tcp 172.31.25.97:6443: connect: connection refused" interval="200ms" Mar 17 18:19:19.991780 kubelet[2361]: I0317 18:19:19.991731 2361 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:19:19.991906 kubelet[2361]: I0317 18:19:19.991884 2361 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:19:19.992377 kubelet[2361]: I0317 18:19:19.992240 2361 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:19:19.992000 audit[2372]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:19.992000 audit[2372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff255a570 a2=0 a3=1 items=0 ppid=2361 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:19.992000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:19:19.994000 audit[2373]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:19.994000 audit[2373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff28f3e80 a2=0 a3=1 items=0 ppid=2361 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:19.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:19:19.997687 kubelet[2361]: W0317 18:19:19.997599 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.25.97:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:19.997835 kubelet[2361]: E0317 18:19:19.997700 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.25.97:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:19.999155 kubelet[2361]: I0317 18:19:19.999092 2361 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:19:20.000000 audit[2375]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:20.000000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff75fd0a0 a2=0 a3=1 items=0 ppid=2361 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.000000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:19:20.005000 audit[2377]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:20.005000 audit[2377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd6e7d2a0 a2=0 a3=1 items=0 ppid=2361 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:19:20.009972 kubelet[2361]: E0317 18:19:20.009920 2361 kubelet.go:1561] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:19:20.030633 kubelet[2361]: I0317 18:19:20.030598 2361 cpu_manager.go:221] "Starting CPU manager" policy="none" Mar 17 18:19:20.031223 kubelet[2361]: I0317 18:19:20.031183 2361 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Mar 17 18:19:20.031367 kubelet[2361]: I0317 18:19:20.031346 2361 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:19:20.032000 audit[2384]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:20.032000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc572d920 a2=0 a3=1 items=0 ppid=2361 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.032000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Mar 17 18:19:20.034433 kubelet[2361]: I0317 18:19:20.034405 2361 policy_none.go:49] "None policy: Start" Mar 17 18:19:20.034602 kubelet[2361]: I0317 18:19:20.034581 2361 memory_manager.go:186] "Starting memorymanager" policy="None" Mar 17 18:19:20.034759 kubelet[2361]: I0317 18:19:20.034736 2361 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:19:20.035541 kubelet[2361]: I0317 18:19:20.035471 2361 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:19:20.036000 audit[2386]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:20.036000 audit[2386]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd7eb56d0 a2=0 a3=1 items=0 ppid=2361 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.036000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Mar 17 18:19:20.037000 audit[2385]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:20.037000 audit[2385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdc355070 a2=0 a3=1 items=0 ppid=2361 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.037000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:19:20.041446 kubelet[2361]: I0317 18:19:20.041163 2361 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:19:20.041446 kubelet[2361]: I0317 18:19:20.041246 2361 status_manager.go:227] "Starting to sync pod status with apiserver" Mar 17 18:19:20.041446 kubelet[2361]: I0317 18:19:20.041283 2361 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Mar 17 18:19:20.041446 kubelet[2361]: I0317 18:19:20.041300 2361 kubelet.go:2388] "Starting kubelet main sync loop" Mar 17 18:19:20.041446 kubelet[2361]: E0317 18:19:20.041379 2361 kubelet.go:2412] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:19:20.042000 audit[2389]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2389 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:20.042000 audit[2389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd6d5590 a2=0 a3=1 items=0 ppid=2361 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.042000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Mar 17 18:19:20.045902 kubelet[2361]: W0317 18:19:20.045855 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.25.97:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:20.047571 kubelet[2361]: E0317 18:19:20.046816 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.25.97:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:20.049325 systemd[1]: Created slice kubepods.slice. Mar 17 18:19:20.049000 audit[2390]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=2390 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:20.049000 audit[2390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffcee6b170 a2=0 a3=1 items=0 ppid=2361 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.049000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:19:20.052000 audit[2388]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:20.052000 audit[2388]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe45c97b0 a2=0 a3=1 items=0 ppid=2361 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Mar 17 18:19:20.056000 audit[2392]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:20.056000 audit[2392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffbda2840 a2=0 a3=1 items=0 ppid=2361 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:19:20.061874 systemd[1]: Created slice kubepods-burstable.slice. Mar 17 18:19:20.069028 systemd[1]: Created slice kubepods-besteffort.slice. Mar 17 18:19:20.074000 audit[2393]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:20.074000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcb9afa70 a2=0 a3=1 items=0 ppid=2361 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.074000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Mar 17 18:19:20.080883 kubelet[2361]: I0317 18:19:20.080821 2361 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:19:20.079000 audit[2361]: AVC avc: denied { mac_admin } for pid=2361 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:20.079000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:19:20.079000 audit[2361]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000becc30 a1=4000e3a1b0 a2=4000becc00 a3=25 items=0 ppid=1 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:20.079000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:19:20.083863 kubelet[2361]: I0317 18:19:20.082238 2361 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:19:20.083863 kubelet[2361]: I0317 18:19:20.082487 2361 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:19:20.083863 kubelet[2361]: I0317 18:19:20.082509 2361 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:19:20.083863 kubelet[2361]: I0317 18:19:20.082974 2361 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:19:20.086317 kubelet[2361]: E0317 18:19:20.086197 2361 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Mar 17 18:19:20.086454 kubelet[2361]: E0317 18:19:20.086320 2361 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-25-97\" not found" Mar 17 18:19:20.159263 systemd[1]: Created slice kubepods-burstable-pode36e51eb3afd1b0e57b53a573361b6b3.slice. Mar 17 18:19:20.174149 kubelet[2361]: E0317 18:19:20.173748 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:20.177707 systemd[1]: Created slice kubepods-burstable-podbf6b65160002c46ee203a547e87daf52.slice. Mar 17 18:19:20.181391 kubelet[2361]: E0317 18:19:20.181326 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:20.184930 kubelet[2361]: I0317 18:19:20.184893 2361 kubelet_node_status.go:76] "Attempting to register node" node="ip-172-31-25-97" Mar 17 18:19:20.185730 kubelet[2361]: E0317 18:19:20.185687 2361 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://172.31.25.97:6443/api/v1/nodes\": dial tcp 172.31.25.97:6443: connect: connection refused" node="ip-172-31-25-97" Mar 17 18:19:20.188251 systemd[1]: Created slice kubepods-burstable-poda75831e79441d3044d55a0adc39a1818.slice. Mar 17 18:19:20.191704 kubelet[2361]: E0317 18:19:20.191656 2361 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.97:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-97?timeout=10s\": dial tcp 172.31.25.97:6443: connect: connection refused" interval="400ms" Mar 17 18:19:20.192318 kubelet[2361]: E0317 18:19:20.192283 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:20.194198 kubelet[2361]: I0317 18:19:20.194167 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e36e51eb3afd1b0e57b53a573361b6b3-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-97\" (UID: \"e36e51eb3afd1b0e57b53a573361b6b3\") " pod="kube-system/kube-scheduler-ip-172-31-25-97" Mar 17 18:19:20.194423 kubelet[2361]: I0317 18:19:20.194396 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/bf6b65160002c46ee203a547e87daf52-ca-certs\") pod \"kube-apiserver-ip-172-31-25-97\" (UID: \"bf6b65160002c46ee203a547e87daf52\") " pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:20.194557 kubelet[2361]: I0317 18:19:20.194532 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/bf6b65160002c46ee203a547e87daf52-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-97\" (UID: \"bf6b65160002c46ee203a547e87daf52\") " pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:20.194707 kubelet[2361]: I0317 18:19:20.194678 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/bf6b65160002c46ee203a547e87daf52-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-97\" (UID: \"bf6b65160002c46ee203a547e87daf52\") " pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:20.194838 kubelet[2361]: I0317 18:19:20.194813 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:20.194970 kubelet[2361]: I0317 18:19:20.194944 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:20.195099 kubelet[2361]: I0317 18:19:20.195074 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:20.195254 kubelet[2361]: I0317 18:19:20.195228 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:20.195426 kubelet[2361]: I0317 18:19:20.195395 2361 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:20.388930 kubelet[2361]: I0317 18:19:20.388816 2361 kubelet_node_status.go:76] "Attempting to register node" node="ip-172-31-25-97" Mar 17 18:19:20.390639 kubelet[2361]: E0317 18:19:20.390586 2361 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://172.31.25.97:6443/api/v1/nodes\": dial tcp 172.31.25.97:6443: connect: connection refused" node="ip-172-31-25-97" Mar 17 18:19:20.475856 env[1816]: time="2025-03-17T18:19:20.475777375Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-97,Uid:e36e51eb3afd1b0e57b53a573361b6b3,Namespace:kube-system,Attempt:0,}" Mar 17 18:19:20.483760 env[1816]: time="2025-03-17T18:19:20.483677890Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-97,Uid:bf6b65160002c46ee203a547e87daf52,Namespace:kube-system,Attempt:0,}" Mar 17 18:19:20.494089 env[1816]: time="2025-03-17T18:19:20.493672847Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-97,Uid:a75831e79441d3044d55a0adc39a1818,Namespace:kube-system,Attempt:0,}" Mar 17 18:19:20.593410 kubelet[2361]: E0317 18:19:20.593333 2361 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.97:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-97?timeout=10s\": dial tcp 172.31.25.97:6443: connect: connection refused" interval="800ms" Mar 17 18:19:20.794466 kubelet[2361]: I0317 18:19:20.793817 2361 kubelet_node_status.go:76] "Attempting to register node" node="ip-172-31-25-97" Mar 17 18:19:20.794656 kubelet[2361]: E0317 18:19:20.794575 2361 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://172.31.25.97:6443/api/v1/nodes\": dial tcp 172.31.25.97:6443: connect: connection refused" node="ip-172-31-25-97" Mar 17 18:19:20.897077 kubelet[2361]: W0317 18:19:20.897025 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.25.97:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:20.897265 kubelet[2361]: E0317 18:19:20.897096 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.25.97:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:20.914357 kubelet[2361]: W0317 18:19:20.914294 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.25.97:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:20.914482 kubelet[2361]: E0317 18:19:20.914366 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.25.97:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:20.942878 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2547797469.mount: Deactivated successfully. Mar 17 18:19:20.954264 env[1816]: time="2025-03-17T18:19:20.954188181Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.957130 env[1816]: time="2025-03-17T18:19:20.957077712Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.960803 env[1816]: time="2025-03-17T18:19:20.960747007Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.966727 env[1816]: time="2025-03-17T18:19:20.966650360Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.975540 env[1816]: time="2025-03-17T18:19:20.975482698Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.982312 env[1816]: time="2025-03-17T18:19:20.982253345Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.990868 env[1816]: time="2025-03-17T18:19:20.990808960Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.993604 env[1816]: time="2025-03-17T18:19:20.993545687Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.996079 env[1816]: time="2025-03-17T18:19:20.996025627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:20.997801 env[1816]: time="2025-03-17T18:19:20.997756766Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:21.000439 env[1816]: time="2025-03-17T18:19:21.000343969Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:21.005670 env[1816]: time="2025-03-17T18:19:21.005595587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:21.036933 kubelet[2361]: W0317 18:19:21.036793 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.25.97:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-97&limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:21.036933 kubelet[2361]: E0317 18:19:21.036889 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.25.97:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-97&limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:21.060305 env[1816]: time="2025-03-17T18:19:21.059737787Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:19:21.060305 env[1816]: time="2025-03-17T18:19:21.059810457Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:19:21.060305 env[1816]: time="2025-03-17T18:19:21.059857366Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:19:21.061555 env[1816]: time="2025-03-17T18:19:21.061255213Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/08e453191f5158ad92dc242b07dbe46bb00e9416bbcac6818625977d065ab16d pid=2402 runtime=io.containerd.runc.v2 Mar 17 18:19:21.069892 env[1816]: time="2025-03-17T18:19:21.069685411Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:19:21.069892 env[1816]: time="2025-03-17T18:19:21.069767172Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:19:21.069892 env[1816]: time="2025-03-17T18:19:21.069831603Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:19:21.070567 env[1816]: time="2025-03-17T18:19:21.070463423Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3d20507ef246aaf4649b665ed69ca75d1ac51f56c2b83f0261dce21ea02acca0 pid=2417 runtime=io.containerd.runc.v2 Mar 17 18:19:21.073410 env[1816]: time="2025-03-17T18:19:21.073265519Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:19:21.073670 env[1816]: time="2025-03-17T18:19:21.073353104Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:19:21.073889 env[1816]: time="2025-03-17T18:19:21.073803521Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:19:21.074482 env[1816]: time="2025-03-17T18:19:21.074369662Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b12f35d810da61f3735b60756ea9307a75809b937f979aecf33f67dc8e704f95 pid=2428 runtime=io.containerd.runc.v2 Mar 17 18:19:21.097432 systemd[1]: Started cri-containerd-08e453191f5158ad92dc242b07dbe46bb00e9416bbcac6818625977d065ab16d.scope. Mar 17 18:19:21.107163 systemd[1]: Started cri-containerd-b12f35d810da61f3735b60756ea9307a75809b937f979aecf33f67dc8e704f95.scope. Mar 17 18:19:21.154559 systemd[1]: Started cri-containerd-3d20507ef246aaf4649b665ed69ca75d1ac51f56c2b83f0261dce21ea02acca0.scope. Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.168000 audit: BPF prog-id=61 op=LOAD Mar 17 18:19:21.171000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.171000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2402 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653435333139316635313538616439326463323432623037646265 Mar 17 18:19:21.172000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.172000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2402 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653435333139316635313538616439326463323432623037646265 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.178000 audit: BPF prog-id=62 op=LOAD Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2428 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231326633356438313064613631663337333562363037353665613933 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2428 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231326633356438313064613631663337333562363037353665613933 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit: BPF prog-id=63 op=LOAD Mar 17 18:19:21.179000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2428 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231326633356438313064613631663337333562363037353665613933 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit: BPF prog-id=64 op=LOAD Mar 17 18:19:21.179000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2428 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231326633356438313064613631663337333562363037353665613933 Mar 17 18:19:21.179000 audit: BPF prog-id=64 op=UNLOAD Mar 17 18:19:21.179000 audit: BPF prog-id=63 op=UNLOAD Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.179000 audit: BPF prog-id=65 op=LOAD Mar 17 18:19:21.179000 audit[2453]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2428 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231326633356438313064613631663337333562363037353665613933 Mar 17 18:19:21.173000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.173000 audit: BPF prog-id=66 op=LOAD Mar 17 18:19:21.173000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2402 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653435333139316635313538616439326463323432623037646265 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.187000 audit: BPF prog-id=67 op=LOAD Mar 17 18:19:21.187000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2402 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653435333139316635313538616439326463323432623037646265 Mar 17 18:19:21.191000 audit: BPF prog-id=67 op=UNLOAD Mar 17 18:19:21.191000 audit: BPF prog-id=66 op=UNLOAD Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.191000 audit: BPF prog-id=68 op=LOAD Mar 17 18:19:21.191000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2402 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038653435333139316635313538616439326463323432623037646265 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.205000 audit: BPF prog-id=69 op=LOAD Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2417 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323035303765663234366161663436343962363635656436396361 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2417 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323035303765663234366161663436343962363635656436396361 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit: BPF prog-id=70 op=LOAD Mar 17 18:19:21.206000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2417 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323035303765663234366161663436343962363635656436396361 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit: BPF prog-id=71 op=LOAD Mar 17 18:19:21.206000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2417 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323035303765663234366161663436343962363635656436396361 Mar 17 18:19:21.206000 audit: BPF prog-id=71 op=UNLOAD Mar 17 18:19:21.206000 audit: BPF prog-id=70 op=UNLOAD Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.206000 audit: BPF prog-id=72 op=LOAD Mar 17 18:19:21.206000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2417 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323035303765663234366161663436343962363635656436396361 Mar 17 18:19:21.253946 env[1816]: time="2025-03-17T18:19:21.253879736Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-97,Uid:e36e51eb3afd1b0e57b53a573361b6b3,Namespace:kube-system,Attempt:0,} returns sandbox id \"b12f35d810da61f3735b60756ea9307a75809b937f979aecf33f67dc8e704f95\"" Mar 17 18:19:21.287272 env[1816]: time="2025-03-17T18:19:21.287163021Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-97,Uid:a75831e79441d3044d55a0adc39a1818,Namespace:kube-system,Attempt:0,} returns sandbox id \"08e453191f5158ad92dc242b07dbe46bb00e9416bbcac6818625977d065ab16d\"" Mar 17 18:19:21.290319 env[1816]: time="2025-03-17T18:19:21.290263709Z" level=info msg="CreateContainer within sandbox \"b12f35d810da61f3735b60756ea9307a75809b937f979aecf33f67dc8e704f95\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Mar 17 18:19:21.294115 env[1816]: time="2025-03-17T18:19:21.294058451Z" level=info msg="CreateContainer within sandbox \"08e453191f5158ad92dc242b07dbe46bb00e9416bbcac6818625977d065ab16d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Mar 17 18:19:21.298005 env[1816]: time="2025-03-17T18:19:21.297925718Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-97,Uid:bf6b65160002c46ee203a547e87daf52,Namespace:kube-system,Attempt:0,} returns sandbox id \"3d20507ef246aaf4649b665ed69ca75d1ac51f56c2b83f0261dce21ea02acca0\"" Mar 17 18:19:21.306001 env[1816]: time="2025-03-17T18:19:21.305192567Z" level=info msg="CreateContainer within sandbox \"3d20507ef246aaf4649b665ed69ca75d1ac51f56c2b83f0261dce21ea02acca0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Mar 17 18:19:21.331780 env[1816]: time="2025-03-17T18:19:21.325685024Z" level=info msg="CreateContainer within sandbox \"b12f35d810da61f3735b60756ea9307a75809b937f979aecf33f67dc8e704f95\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3\"" Mar 17 18:19:21.333353 env[1816]: time="2025-03-17T18:19:21.333293099Z" level=info msg="StartContainer for \"13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3\"" Mar 17 18:19:21.339243 env[1816]: time="2025-03-17T18:19:21.339156119Z" level=info msg="CreateContainer within sandbox \"08e453191f5158ad92dc242b07dbe46bb00e9416bbcac6818625977d065ab16d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda\"" Mar 17 18:19:21.340108 env[1816]: time="2025-03-17T18:19:21.340058177Z" level=info msg="StartContainer for \"62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda\"" Mar 17 18:19:21.346540 env[1816]: time="2025-03-17T18:19:21.346475989Z" level=info msg="CreateContainer within sandbox \"3d20507ef246aaf4649b665ed69ca75d1ac51f56c2b83f0261dce21ea02acca0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"37ad842e4bd06e615407eabefc7515b65ddf079474125487e10410fca7585817\"" Mar 17 18:19:21.347484 env[1816]: time="2025-03-17T18:19:21.347393432Z" level=info msg="StartContainer for \"37ad842e4bd06e615407eabefc7515b65ddf079474125487e10410fca7585817\"" Mar 17 18:19:21.381302 systemd[1]: Started cri-containerd-13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3.scope. Mar 17 18:19:21.394690 kubelet[2361]: E0317 18:19:21.394611 2361 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.97:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-97?timeout=10s\": dial tcp 172.31.25.97:6443: connect: connection refused" interval="1.6s" Mar 17 18:19:21.416517 kubelet[2361]: W0317 18:19:21.416198 2361 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.25.97:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.25.97:6443: connect: connection refused Mar 17 18:19:21.416517 kubelet[2361]: E0317 18:19:21.416333 2361 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.25.97:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.25.97:6443: connect: connection refused" logger="UnhandledError" Mar 17 18:19:21.417117 systemd[1]: Started cri-containerd-62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda.scope. Mar 17 18:19:21.441292 systemd[1]: Started cri-containerd-37ad842e4bd06e615407eabefc7515b65ddf079474125487e10410fca7585817.scope. Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.455000 audit: BPF prog-id=73 op=LOAD Mar 17 18:19:21.456000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.456000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2428 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133393836643164373635613536336161613062633564376366656431 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2428 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133393836643164373635613536336161613062633564376366656431 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.457000 audit: BPF prog-id=74 op=LOAD Mar 17 18:19:21.457000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2428 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133393836643164373635613536336161613062633564376366656431 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.459000 audit: BPF prog-id=75 op=LOAD Mar 17 18:19:21.459000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2428 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133393836643164373635613536336161613062633564376366656431 Mar 17 18:19:21.459000 audit: BPF prog-id=75 op=UNLOAD Mar 17 18:19:21.459000 audit: BPF prog-id=74 op=UNLOAD Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.460000 audit: BPF prog-id=76 op=LOAD Mar 17 18:19:21.460000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2428 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133393836643164373635613536336161613062633564376366656431 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.492000 audit: BPF prog-id=77 op=LOAD Mar 17 18:19:21.494000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.494000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2402 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623533613631353639396366363461666662646537353836366261 Mar 17 18:19:21.494000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.494000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2402 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623533613631353639396366363461666662646537353836366261 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.496000 audit: BPF prog-id=78 op=LOAD Mar 17 18:19:21.496000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2402 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623533613631353639396366363461666662646537353836366261 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.499000 audit: BPF prog-id=79 op=LOAD Mar 17 18:19:21.499000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2402 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623533613631353639396366363461666662646537353836366261 Mar 17 18:19:21.500000 audit: BPF prog-id=79 op=UNLOAD Mar 17 18:19:21.500000 audit: BPF prog-id=78 op=UNLOAD Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.500000 audit: BPF prog-id=80 op=LOAD Mar 17 18:19:21.500000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2402 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623533613631353639396366363461666662646537353836366261 Mar 17 18:19:21.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.509000 audit: BPF prog-id=81 op=LOAD Mar 17 18:19:21.510000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.510000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2417 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337616438343265346264303665363135343037656162656663373531 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2417 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337616438343265346264303665363135343037656162656663373531 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.511000 audit: BPF prog-id=82 op=LOAD Mar 17 18:19:21.511000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2417 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337616438343265346264303665363135343037656162656663373531 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit: BPF prog-id=83 op=LOAD Mar 17 18:19:21.512000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2417 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337616438343265346264303665363135343037656162656663373531 Mar 17 18:19:21.512000 audit: BPF prog-id=83 op=UNLOAD Mar 17 18:19:21.512000 audit: BPF prog-id=82 op=UNLOAD Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:21.512000 audit: BPF prog-id=84 op=LOAD Mar 17 18:19:21.512000 audit[2561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2417 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:21.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337616438343265346264303665363135343037656162656663373531 Mar 17 18:19:21.532940 env[1816]: time="2025-03-17T18:19:21.532853619Z" level=info msg="StartContainer for \"13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3\" returns successfully" Mar 17 18:19:21.590728 env[1816]: time="2025-03-17T18:19:21.590562705Z" level=info msg="StartContainer for \"62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda\" returns successfully" Mar 17 18:19:21.599607 kubelet[2361]: I0317 18:19:21.599515 2361 kubelet_node_status.go:76] "Attempting to register node" node="ip-172-31-25-97" Mar 17 18:19:21.600342 kubelet[2361]: E0317 18:19:21.600267 2361 kubelet_node_status.go:108] "Unable to register node with API server" err="Post \"https://172.31.25.97:6443/api/v1/nodes\": dial tcp 172.31.25.97:6443: connect: connection refused" node="ip-172-31-25-97" Mar 17 18:19:21.612086 env[1816]: time="2025-03-17T18:19:21.612011972Z" level=info msg="StartContainer for \"37ad842e4bd06e615407eabefc7515b65ddf079474125487e10410fca7585817\" returns successfully" Mar 17 18:19:22.056961 kubelet[2361]: E0317 18:19:22.056842 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:22.062949 kubelet[2361]: E0317 18:19:22.062894 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:22.066863 kubelet[2361]: E0317 18:19:22.066813 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:23.069227 kubelet[2361]: E0317 18:19:23.069161 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:23.069793 kubelet[2361]: E0317 18:19:23.069739 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:23.203306 kubelet[2361]: I0317 18:19:23.203255 2361 kubelet_node_status.go:76] "Attempting to register node" node="ip-172-31-25-97" Mar 17 18:19:24.488000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:24.490655 kernel: kauditd_printk_skb: 566 callbacks suppressed Mar 17 18:19:24.490789 kernel: audit: type=1400 audit(1742235564.488:556): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:24.489000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:24.511606 kernel: audit: type=1400 audit(1742235564.489:557): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:24.489000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003a7000 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:24.525260 kernel: audit: type=1300 audit(1742235564.489:557): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003a7000 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:24.489000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:24.540493 kernel: audit: type=1327 audit(1742235564.489:557): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:24.488000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40005a73e0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:24.556413 kernel: audit: type=1300 audit(1742235564.488:556): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40005a73e0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:24.488000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:24.571421 kernel: audit: type=1327 audit(1742235564.488:556): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:25.289000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.289000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006da2a20 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:19:25.311524 kernel: audit: type=1400 audit(1742235565.289:558): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.311628 kernel: audit: type=1300 audit(1742235565.289:558): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006da2a20 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:19:25.289000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:19:25.320972 kernel: audit: type=1327 audit(1742235565.289:558): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:19:25.322000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.322000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4004c19940 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:19:25.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:19:25.323000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7339 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.323000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006da2f30 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:19:25.323000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:19:25.334000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.334000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40051e79e0 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:19:25.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:19:25.339246 kernel: audit: type=1400 audit(1742235565.322:559): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.447000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.447000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003e765c0 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:19:25.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:19:25.447000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:25.447000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400395b380 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:19:25.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:19:25.498894 kubelet[2361]: E0317 18:19:25.498853 2361 kubelet.go:3196] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:25.524910 kubelet[2361]: E0317 18:19:25.524776 2361 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-25-97\" not found" node="ip-172-31-25-97" Mar 17 18:19:25.601815 kubelet[2361]: I0317 18:19:25.601672 2361 kubelet_node_status.go:79] "Successfully registered node" node="ip-172-31-25-97" Mar 17 18:19:25.690279 kubelet[2361]: I0317 18:19:25.690153 2361 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:25.721347 kubelet[2361]: E0317 18:19:25.721258 2361 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-25-97\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:25.721703 kubelet[2361]: I0317 18:19:25.721638 2361 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-25-97" Mar 17 18:19:25.731672 kubelet[2361]: E0317 18:19:25.731596 2361 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-25-97\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-25-97" Mar 17 18:19:25.731672 kubelet[2361]: I0317 18:19:25.731662 2361 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:25.735760 kubelet[2361]: E0317 18:19:25.735690 2361 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-25-97\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:25.950140 kubelet[2361]: I0317 18:19:25.949993 2361 apiserver.go:52] "Watching apiserver" Mar 17 18:19:25.991337 kubelet[2361]: I0317 18:19:25.991273 2361 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:19:26.444595 update_engine[1811]: I0317 18:19:26.444535 1811 update_attempter.cc:509] Updating boot flags... Mar 17 18:19:27.274301 kubelet[2361]: I0317 18:19:27.274246 2361 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:27.461118 kubelet[2361]: I0317 18:19:27.461082 2361 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-25-97" Mar 17 18:19:27.934069 systemd[1]: Reloading. Mar 17 18:19:28.092925 /usr/lib/systemd/system-generators/torcx-generator[2761]: time="2025-03-17T18:19:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Mar 17 18:19:28.097859 /usr/lib/systemd/system-generators/torcx-generator[2761]: time="2025-03-17T18:19:28Z" level=info msg="torcx already run" Mar 17 18:19:28.265071 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Mar 17 18:19:28.265630 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Mar 17 18:19:28.314607 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Mar 17 18:19:28.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.519000 audit: BPF prog-id=85 op=LOAD Mar 17 18:19:28.519000 audit: BPF prog-id=77 op=UNLOAD Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit: BPF prog-id=86 op=LOAD Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.522000 audit: BPF prog-id=87 op=LOAD Mar 17 18:19:28.522000 audit: BPF prog-id=46 op=UNLOAD Mar 17 18:19:28.522000 audit: BPF prog-id=47 op=UNLOAD Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.526000 audit: BPF prog-id=88 op=LOAD Mar 17 18:19:28.526000 audit: BPF prog-id=48 op=UNLOAD Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.530000 audit: BPF prog-id=89 op=LOAD Mar 17 18:19:28.530000 audit: BPF prog-id=69 op=UNLOAD Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.534000 audit: BPF prog-id=90 op=LOAD Mar 17 18:19:28.534000 audit: BPF prog-id=49 op=UNLOAD Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.540000 audit: BPF prog-id=91 op=LOAD Mar 17 18:19:28.540000 audit: BPF prog-id=81 op=UNLOAD Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.543000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.543000 audit: BPF prog-id=92 op=LOAD Mar 17 18:19:28.543000 audit: BPF prog-id=50 op=UNLOAD Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.544000 audit: BPF prog-id=93 op=LOAD Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.545000 audit: BPF prog-id=94 op=LOAD Mar 17 18:19:28.546000 audit: BPF prog-id=51 op=UNLOAD Mar 17 18:19:28.546000 audit: BPF prog-id=52 op=UNLOAD Mar 17 18:19:28.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.550000 audit: BPF prog-id=95 op=LOAD Mar 17 18:19:28.550000 audit: BPF prog-id=62 op=UNLOAD Mar 17 18:19:28.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.554000 audit: BPF prog-id=96 op=LOAD Mar 17 18:19:28.554000 audit: BPF prog-id=53 op=UNLOAD Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.556000 audit: BPF prog-id=97 op=LOAD Mar 17 18:19:28.556000 audit: BPF prog-id=73 op=UNLOAD Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.559000 audit: BPF prog-id=98 op=LOAD Mar 17 18:19:28.559000 audit: BPF prog-id=54 op=UNLOAD Mar 17 18:19:28.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.560000 audit: BPF prog-id=99 op=LOAD Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.561000 audit: BPF prog-id=100 op=LOAD Mar 17 18:19:28.562000 audit: BPF prog-id=55 op=UNLOAD Mar 17 18:19:28.562000 audit: BPF prog-id=56 op=UNLOAD Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.565000 audit: BPF prog-id=101 op=LOAD Mar 17 18:19:28.565000 audit: BPF prog-id=61 op=UNLOAD Mar 17 18:19:28.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.568000 audit: BPF prog-id=102 op=LOAD Mar 17 18:19:28.568000 audit: BPF prog-id=57 op=UNLOAD Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit: BPF prog-id=103 op=LOAD Mar 17 18:19:28.573000 audit: BPF prog-id=58 op=UNLOAD Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.574000 audit: BPF prog-id=104 op=LOAD Mar 17 18:19:28.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:28.575000 audit: BPF prog-id=105 op=LOAD Mar 17 18:19:28.575000 audit: BPF prog-id=59 op=UNLOAD Mar 17 18:19:28.575000 audit: BPF prog-id=60 op=UNLOAD Mar 17 18:19:28.617837 systemd[1]: Stopping kubelet.service... Mar 17 18:19:28.648894 systemd[1]: kubelet.service: Deactivated successfully. Mar 17 18:19:28.649518 systemd[1]: Stopped kubelet.service. Mar 17 18:19:28.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:28.649753 systemd[1]: kubelet.service: Consumed 1.708s CPU time. Mar 17 18:19:28.653689 systemd[1]: Starting kubelet.service... Mar 17 18:19:28.992593 systemd[1]: Started kubelet.service. Mar 17 18:19:28.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:29.102168 kubelet[2815]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:19:29.102720 kubelet[2815]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Mar 17 18:19:29.102829 kubelet[2815]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Mar 17 18:19:29.103279 kubelet[2815]: I0317 18:19:29.103184 2815 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Mar 17 18:19:29.118476 kubelet[2815]: I0317 18:19:29.118431 2815 server.go:520] "Kubelet version" kubeletVersion="v1.32.0" Mar 17 18:19:29.118724 kubelet[2815]: I0317 18:19:29.118700 2815 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Mar 17 18:19:29.119511 kubelet[2815]: I0317 18:19:29.119475 2815 server.go:954] "Client rotation is on, will bootstrap in background" Mar 17 18:19:29.129077 kubelet[2815]: I0317 18:19:29.129038 2815 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Mar 17 18:19:29.134046 kubelet[2815]: I0317 18:19:29.133908 2815 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Mar 17 18:19:29.145475 kubelet[2815]: E0317 18:19:29.144056 2815 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Mar 17 18:19:29.145475 kubelet[2815]: I0317 18:19:29.144131 2815 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Mar 17 18:19:29.149463 kubelet[2815]: I0317 18:19:29.149380 2815 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Mar 17 18:19:29.149912 kubelet[2815]: I0317 18:19:29.149858 2815 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Mar 17 18:19:29.151449 kubelet[2815]: I0317 18:19:29.149915 2815 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-25-97","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Mar 17 18:19:29.151449 kubelet[2815]: I0317 18:19:29.150306 2815 topology_manager.go:138] "Creating topology manager with none policy" Mar 17 18:19:29.151449 kubelet[2815]: I0317 18:19:29.150331 2815 container_manager_linux.go:304] "Creating device plugin manager" Mar 17 18:19:29.151449 kubelet[2815]: I0317 18:19:29.150413 2815 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:19:29.151449 kubelet[2815]: I0317 18:19:29.150644 2815 kubelet.go:446] "Attempting to sync node with API server" Mar 17 18:19:29.151910 kubelet[2815]: I0317 18:19:29.150666 2815 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Mar 17 18:19:29.163030 kubelet[2815]: I0317 18:19:29.151695 2815 kubelet.go:352] "Adding apiserver pod source" Mar 17 18:19:29.171727 kubelet[2815]: I0317 18:19:29.171690 2815 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Mar 17 18:19:29.184841 kubelet[2815]: I0317 18:19:29.183531 2815 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Mar 17 18:19:29.184841 kubelet[2815]: I0317 18:19:29.184611 2815 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Mar 17 18:19:29.185666 kubelet[2815]: I0317 18:19:29.185619 2815 watchdog_linux.go:99] "Systemd watchdog is not enabled" Mar 17 18:19:29.185782 kubelet[2815]: I0317 18:19:29.185688 2815 server.go:1287] "Started kubelet" Mar 17 18:19:29.196189 kubelet[2815]: I0317 18:19:29.196121 2815 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Mar 17 18:19:29.198091 kubelet[2815]: I0317 18:19:29.198058 2815 server.go:490] "Adding debug handlers to kubelet server" Mar 17 18:19:29.197000 audit[2815]: AVC avc: denied { mac_admin } for pid=2815 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:29.197000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:19:29.197000 audit[2815]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b9fb90 a1=40001b9a40 a2=4000b9fb60 a3=25 items=0 ppid=1 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:29.197000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:19:29.197000 audit[2815]: AVC avc: denied { mac_admin } for pid=2815 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:29.197000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:19:29.197000 audit[2815]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b9c2c0 a1=40001b9a58 a2=4000b9fc20 a3=25 items=0 ppid=1 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:29.197000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:19:29.199857 kubelet[2815]: I0317 18:19:29.199134 2815 kubelet.go:1513] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Mar 17 18:19:29.199857 kubelet[2815]: I0317 18:19:29.199243 2815 kubelet.go:1517] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Mar 17 18:19:29.199857 kubelet[2815]: I0317 18:19:29.199308 2815 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Mar 17 18:19:29.201038 kubelet[2815]: I0317 18:19:29.200958 2815 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Mar 17 18:19:29.201536 kubelet[2815]: I0317 18:19:29.201508 2815 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Mar 17 18:19:29.206190 kubelet[2815]: I0317 18:19:29.206121 2815 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Mar 17 18:19:29.208802 kubelet[2815]: I0317 18:19:29.208755 2815 volume_manager.go:297] "Starting Kubelet Volume Manager" Mar 17 18:19:29.209236 kubelet[2815]: E0317 18:19:29.209180 2815 kubelet_node_status.go:467] "Error getting the current node from lister" err="node \"ip-172-31-25-97\" not found" Mar 17 18:19:29.211110 kubelet[2815]: I0317 18:19:29.211028 2815 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Mar 17 18:19:29.214184 kubelet[2815]: I0317 18:19:29.214130 2815 reconciler.go:26] "Reconciler: start to sync state" Mar 17 18:19:29.225532 kubelet[2815]: I0317 18:19:29.225477 2815 factory.go:221] Registration of the systemd container factory successfully Mar 17 18:19:29.227269 kubelet[2815]: I0317 18:19:29.225668 2815 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Mar 17 18:19:29.235601 kubelet[2815]: E0317 18:19:29.235551 2815 kubelet.go:1561] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Mar 17 18:19:29.236604 kubelet[2815]: I0317 18:19:29.236547 2815 factory.go:221] Registration of the containerd container factory successfully Mar 17 18:19:29.282512 kubelet[2815]: I0317 18:19:29.282365 2815 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Mar 17 18:19:29.288874 kubelet[2815]: I0317 18:19:29.288825 2815 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Mar 17 18:19:29.288874 kubelet[2815]: I0317 18:19:29.288873 2815 status_manager.go:227] "Starting to sync pod status with apiserver" Mar 17 18:19:29.289110 kubelet[2815]: I0317 18:19:29.288952 2815 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Mar 17 18:19:29.289110 kubelet[2815]: I0317 18:19:29.288970 2815 kubelet.go:2388] "Starting kubelet main sync loop" Mar 17 18:19:29.289110 kubelet[2815]: E0317 18:19:29.289043 2815 kubelet.go:2412] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Mar 17 18:19:29.370818 kubelet[2815]: I0317 18:19:29.370764 2815 cpu_manager.go:221] "Starting CPU manager" policy="none" Mar 17 18:19:29.370972 kubelet[2815]: I0317 18:19:29.370855 2815 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Mar 17 18:19:29.370972 kubelet[2815]: I0317 18:19:29.370895 2815 state_mem.go:36] "Initialized new in-memory state store" Mar 17 18:19:29.371370 kubelet[2815]: I0317 18:19:29.371325 2815 state_mem.go:88] "Updated default CPUSet" cpuSet="" Mar 17 18:19:29.371450 kubelet[2815]: I0317 18:19:29.371388 2815 state_mem.go:96] "Updated CPUSet assignments" assignments={} Mar 17 18:19:29.371450 kubelet[2815]: I0317 18:19:29.371430 2815 policy_none.go:49] "None policy: Start" Mar 17 18:19:29.371578 kubelet[2815]: I0317 18:19:29.371475 2815 memory_manager.go:186] "Starting memorymanager" policy="None" Mar 17 18:19:29.371578 kubelet[2815]: I0317 18:19:29.371501 2815 state_mem.go:35] "Initializing new in-memory state store" Mar 17 18:19:29.371815 kubelet[2815]: I0317 18:19:29.371788 2815 state_mem.go:75] "Updated machine memory state" Mar 17 18:19:29.386468 kubelet[2815]: I0317 18:19:29.386419 2815 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Mar 17 18:19:29.385000 audit[2815]: AVC avc: denied { mac_admin } for pid=2815 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:29.385000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Mar 17 18:19:29.385000 audit[2815]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b22300 a1=4000cc84b0 a2=4000b222d0 a3=25 items=0 ppid=1 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:29.385000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Mar 17 18:19:29.387002 kubelet[2815]: I0317 18:19:29.386529 2815 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Mar 17 18:19:29.387002 kubelet[2815]: I0317 18:19:29.386773 2815 eviction_manager.go:189] "Eviction manager: starting control loop" Mar 17 18:19:29.387002 kubelet[2815]: I0317 18:19:29.386794 2815 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Mar 17 18:19:29.388104 kubelet[2815]: I0317 18:19:29.388076 2815 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Mar 17 18:19:29.390873 kubelet[2815]: I0317 18:19:29.390813 2815 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-25-97" Mar 17 18:19:29.391979 kubelet[2815]: I0317 18:19:29.391947 2815 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:29.392936 kubelet[2815]: I0317 18:19:29.392901 2815 kubelet.go:3200] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:29.404132 kubelet[2815]: E0317 18:19:29.404091 2815 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-25-97\" already exists" pod="kube-system/kube-scheduler-ip-172-31-25-97" Mar 17 18:19:29.409993 kubelet[2815]: E0317 18:19:29.408740 2815 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Mar 17 18:19:29.414593 kubelet[2815]: I0317 18:19:29.414555 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/bf6b65160002c46ee203a547e87daf52-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-97\" (UID: \"bf6b65160002c46ee203a547e87daf52\") " pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:29.414858 kubelet[2815]: I0317 18:19:29.414810 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:29.415014 kubelet[2815]: I0317 18:19:29.414987 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:29.415200 kubelet[2815]: I0317 18:19:29.415175 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:29.415413 kubelet[2815]: I0317 18:19:29.415386 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e36e51eb3afd1b0e57b53a573361b6b3-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-97\" (UID: \"e36e51eb3afd1b0e57b53a573361b6b3\") " pod="kube-system/kube-scheduler-ip-172-31-25-97" Mar 17 18:19:29.415568 kubelet[2815]: I0317 18:19:29.415543 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/bf6b65160002c46ee203a547e87daf52-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-97\" (UID: \"bf6b65160002c46ee203a547e87daf52\") " pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:29.415724 kubelet[2815]: I0317 18:19:29.415698 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:29.415932 kubelet[2815]: I0317 18:19:29.415895 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a75831e79441d3044d55a0adc39a1818-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-97\" (UID: \"a75831e79441d3044d55a0adc39a1818\") " pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:29.416092 kubelet[2815]: I0317 18:19:29.416067 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/bf6b65160002c46ee203a547e87daf52-ca-certs\") pod \"kube-apiserver-ip-172-31-25-97\" (UID: \"bf6b65160002c46ee203a547e87daf52\") " pod="kube-system/kube-apiserver-ip-172-31-25-97" Mar 17 18:19:29.416854 kubelet[2815]: E0317 18:19:29.416778 2815 kubelet.go:3202] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-25-97\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-25-97" Mar 17 18:19:29.513640 kubelet[2815]: I0317 18:19:29.513592 2815 kubelet_node_status.go:76] "Attempting to register node" node="ip-172-31-25-97" Mar 17 18:19:29.529289 kubelet[2815]: I0317 18:19:29.529242 2815 kubelet_node_status.go:125] "Node was previously registered" node="ip-172-31-25-97" Mar 17 18:19:29.529473 kubelet[2815]: I0317 18:19:29.529363 2815 kubelet_node_status.go:79] "Successfully registered node" node="ip-172-31-25-97" Mar 17 18:19:29.884863 kernel: kauditd_printk_skb: 272 callbacks suppressed Mar 17 18:19:29.885060 kernel: audit: type=1400 audit(1742235569.873:813): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.873000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.873000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8460 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:29.901245 kernel: audit: type=1300 audit(1742235569.873:813): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8460 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:29.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:29.887000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.920278 kernel: audit: type=1327 audit(1742235569.873:813): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:29.920388 kernel: audit: type=1400 audit(1742235569.887:814): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.887000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8660 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:29.932678 kernel: audit: type=1300 audit(1742235569.887:814): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8660 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:29.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:29.944241 kernel: audit: type=1327 audit(1742235569.887:814): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:29.888000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.953676 kernel: audit: type=1400 audit(1742235569.888:815): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.888000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8820 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:29.965154 kernel: audit: type=1300 audit(1742235569.888:815): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8820 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:29.888000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:29.975330 kernel: audit: type=1327 audit(1742235569.888:815): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:29.901000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.984758 kernel: audit: type=1400 audit(1742235569.901:816): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:19:29.901000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd89e0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:29.901000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:30.174906 kubelet[2815]: I0317 18:19:30.174756 2815 apiserver.go:52] "Watching apiserver" Mar 17 18:19:30.211750 kubelet[2815]: I0317 18:19:30.211708 2815 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Mar 17 18:19:30.410620 kubelet[2815]: I0317 18:19:30.410526 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-25-97" podStartSLOduration=3.410503056 podStartE2EDuration="3.410503056s" podCreationTimestamp="2025-03-17 18:19:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:19:30.392982666 +0000 UTC m=+1.386983069" watchObservedRunningTime="2025-03-17 18:19:30.410503056 +0000 UTC m=+1.404503411" Mar 17 18:19:30.430499 kubelet[2815]: I0317 18:19:30.430313 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-25-97" podStartSLOduration=1.430258155 podStartE2EDuration="1.430258155s" podCreationTimestamp="2025-03-17 18:19:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:19:30.411634025 +0000 UTC m=+1.405634404" watchObservedRunningTime="2025-03-17 18:19:30.430258155 +0000 UTC m=+1.424258534" Mar 17 18:19:30.454602 kubelet[2815]: I0317 18:19:30.454492 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-25-97" podStartSLOduration=3.454445431 podStartE2EDuration="3.454445431s" podCreationTimestamp="2025-03-17 18:19:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:19:30.432082138 +0000 UTC m=+1.426082517" watchObservedRunningTime="2025-03-17 18:19:30.454445431 +0000 UTC m=+1.448445810" Mar 17 18:19:31.044000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Mar 17 18:19:31.044000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40006334c0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:19:31.044000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:19:32.571741 kubelet[2815]: I0317 18:19:32.571682 2815 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Mar 17 18:19:32.573424 env[1816]: time="2025-03-17T18:19:32.573269336Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Mar 17 18:19:32.574059 kubelet[2815]: I0317 18:19:32.573778 2815 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Mar 17 18:19:33.527912 systemd[1]: Created slice kubepods-besteffort-podf1b81078_ddfa_4866_9ee0_0360c5ac59b9.slice. Mar 17 18:19:33.544664 kubelet[2815]: W0317 18:19:33.544606 2815 reflector.go:569] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-25-97" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-97' and this object Mar 17 18:19:33.544826 kubelet[2815]: E0317 18:19:33.544673 2815 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"kube-proxy\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-proxy\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ip-172-31-25-97' and this object" logger="UnhandledError" Mar 17 18:19:33.545748 kubelet[2815]: W0317 18:19:33.545700 2815 reflector.go:569] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-97" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-25-97' and this object Mar 17 18:19:33.545938 kubelet[2815]: E0317 18:19:33.545761 2815 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ip-172-31-25-97' and this object" logger="UnhandledError" Mar 17 18:19:33.552424 kubelet[2815]: I0317 18:19:33.552356 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/f1b81078-ddfa-4866-9ee0-0360c5ac59b9-kube-proxy\") pod \"kube-proxy-dzxp4\" (UID: \"f1b81078-ddfa-4866-9ee0-0360c5ac59b9\") " pod="kube-system/kube-proxy-dzxp4" Mar 17 18:19:33.552712 kubelet[2815]: I0317 18:19:33.552674 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f1b81078-ddfa-4866-9ee0-0360c5ac59b9-xtables-lock\") pod \"kube-proxy-dzxp4\" (UID: \"f1b81078-ddfa-4866-9ee0-0360c5ac59b9\") " pod="kube-system/kube-proxy-dzxp4" Mar 17 18:19:33.552883 kubelet[2815]: I0317 18:19:33.552841 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f1b81078-ddfa-4866-9ee0-0360c5ac59b9-lib-modules\") pod \"kube-proxy-dzxp4\" (UID: \"f1b81078-ddfa-4866-9ee0-0360c5ac59b9\") " pod="kube-system/kube-proxy-dzxp4" Mar 17 18:19:33.553081 kubelet[2815]: I0317 18:19:33.553034 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-99lfs\" (UniqueName: \"kubernetes.io/projected/f1b81078-ddfa-4866-9ee0-0360c5ac59b9-kube-api-access-99lfs\") pod \"kube-proxy-dzxp4\" (UID: \"f1b81078-ddfa-4866-9ee0-0360c5ac59b9\") " pod="kube-system/kube-proxy-dzxp4" Mar 17 18:19:33.989957 systemd[1]: Created slice kubepods-besteffort-pod83119b99_ade9_4f6e_b364_2dfc7a577af4.slice. Mar 17 18:19:34.000946 kubelet[2815]: I0317 18:19:34.000863 2815 status_manager.go:890] "Failed to get status for pod" podUID="83119b99-ade9-4f6e-b364-2dfc7a577af4" pod="tigera-operator/tigera-operator-7d68577dc5-nc4b5" err="pods \"tigera-operator-7d68577dc5-nc4b5\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot get resource \"pods\" in API group \"\" in the namespace \"tigera-operator\": no relationship found between node 'ip-172-31-25-97' and this object" Mar 17 18:19:34.001551 kubelet[2815]: W0317 18:19:34.001188 2815 reflector.go:569] object-"tigera-operator"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-97" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-25-97' and this object Mar 17 18:19:34.001551 kubelet[2815]: E0317 18:19:34.001256 2815 reflector.go:166] "Unhandled Error" err="object-\"tigera-operator\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"tigera-operator\": no relationship found between node 'ip-172-31-25-97' and this object" logger="UnhandledError" Mar 17 18:19:34.001551 kubelet[2815]: W0317 18:19:34.001487 2815 reflector.go:569] object-"tigera-operator"/"kubernetes-services-endpoint": failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-25-97" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-25-97' and this object Mar 17 18:19:34.001551 kubelet[2815]: E0317 18:19:34.001521 2815 reflector.go:166] "Unhandled Error" err="object-\"tigera-operator\"/\"kubernetes-services-endpoint\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kubernetes-services-endpoint\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"tigera-operator\": no relationship found between node 'ip-172-31-25-97' and this object" logger="UnhandledError" Mar 17 18:19:34.056525 kubelet[2815]: I0317 18:19:34.056445 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rq4f5\" (UniqueName: \"kubernetes.io/projected/83119b99-ade9-4f6e-b364-2dfc7a577af4-kube-api-access-rq4f5\") pod \"tigera-operator-7d68577dc5-nc4b5\" (UID: \"83119b99-ade9-4f6e-b364-2dfc7a577af4\") " pod="tigera-operator/tigera-operator-7d68577dc5-nc4b5" Mar 17 18:19:34.056715 kubelet[2815]: I0317 18:19:34.056544 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/83119b99-ade9-4f6e-b364-2dfc7a577af4-var-lib-calico\") pod \"tigera-operator-7d68577dc5-nc4b5\" (UID: \"83119b99-ade9-4f6e-b364-2dfc7a577af4\") " pod="tigera-operator/tigera-operator-7d68577dc5-nc4b5" Mar 17 18:19:34.427459 kubelet[2815]: I0317 18:19:34.427395 2815 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Mar 17 18:19:34.655878 kubelet[2815]: E0317 18:19:34.655673 2815 configmap.go:193] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Mar 17 18:19:34.655878 kubelet[2815]: E0317 18:19:34.655803 2815 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/f1b81078-ddfa-4866-9ee0-0360c5ac59b9-kube-proxy podName:f1b81078-ddfa-4866-9ee0-0360c5ac59b9 nodeName:}" failed. No retries permitted until 2025-03-17 18:19:35.155770635 +0000 UTC m=+6.149771002 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/f1b81078-ddfa-4866-9ee0-0360c5ac59b9-kube-proxy") pod "kube-proxy-dzxp4" (UID: "f1b81078-ddfa-4866-9ee0-0360c5ac59b9") : failed to sync configmap cache: timed out waiting for the condition Mar 17 18:19:35.198834 env[1816]: time="2025-03-17T18:19:35.198232257Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7d68577dc5-nc4b5,Uid:83119b99-ade9-4f6e-b364-2dfc7a577af4,Namespace:tigera-operator,Attempt:0,}" Mar 17 18:19:35.237712 env[1816]: time="2025-03-17T18:19:35.237531271Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:19:35.238020 env[1816]: time="2025-03-17T18:19:35.237964429Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:19:35.238268 env[1816]: time="2025-03-17T18:19:35.238167383Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:19:35.240048 env[1816]: time="2025-03-17T18:19:35.239922646Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac pid=2889 runtime=io.containerd.runc.v2 Mar 17 18:19:35.285005 systemd[1]: Started cri-containerd-d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac.scope. Mar 17 18:19:35.340085 kernel: kauditd_printk_skb: 5 callbacks suppressed Mar 17 18:19:35.340287 kernel: audit: type=1400 audit(1742235575.329:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341527 env[1816]: time="2025-03-17T18:19:35.341452740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dzxp4,Uid:f1b81078-ddfa-4866-9ee0-0360c5ac59b9,Namespace:kube-system,Attempt:0,}" Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.358142 kernel: audit: type=1400 audit(1742235575.329:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.358352 kernel: audit: type=1400 audit(1742235575.329:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.376592 kernel: audit: type=1400 audit(1742235575.329:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.404197 kernel: audit: type=1400 audit(1742235575.329:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.404689 kernel: audit: type=1400 audit(1742235575.329:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.418176 kernel: audit: type=1400 audit(1742235575.329:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.418479 env[1816]: time="2025-03-17T18:19:35.413381421Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:19:35.418479 env[1816]: time="2025-03-17T18:19:35.413564171Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:19:35.418479 env[1816]: time="2025-03-17T18:19:35.413696464Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:19:35.418479 env[1816]: time="2025-03-17T18:19:35.414094965Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c9a523b27dbf570bfb35585d4e523615b1b30e642fc020aff2b5d5cec84faf9a pid=2930 runtime=io.containerd.runc.v2 Mar 17 18:19:35.446572 kernel: audit: type=1400 audit(1742235575.329:825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.444793 systemd[1]: run-containerd-runc-k8s.io-d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac-runc.Wl2rLv.mount: Deactivated successfully. Mar 17 18:19:35.463403 kernel: audit: type=1400 audit(1742235575.329:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.472887 kernel: audit: type=1400 audit(1742235575.330:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.464706 sudo[2099]: pam_unix(sudo:session): session closed for user root Mar 17 18:19:35.476152 systemd[1]: Started cri-containerd-c9a523b27dbf570bfb35585d4e523615b1b30e642fc020aff2b5d5cec84faf9a.scope. Mar 17 18:19:35.330000 audit: BPF prog-id=106 op=LOAD Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2889 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343738386262363937323835643733323738303662333461356237 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2889 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343738386262363937323835643733323738303662333461356237 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit: BPF prog-id=107 op=LOAD Mar 17 18:19:35.340000 audit[2903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2889 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343738386262363937323835643733323738303662333461356237 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.340000 audit: BPF prog-id=108 op=LOAD Mar 17 18:19:35.340000 audit[2903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2889 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343738386262363937323835643733323738303662333461356237 Mar 17 18:19:35.341000 audit: BPF prog-id=108 op=UNLOAD Mar 17 18:19:35.341000 audit: BPF prog-id=107 op=UNLOAD Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { perfmon } for pid=2903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit[2903]: AVC avc: denied { bpf } for pid=2903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.341000 audit: BPF prog-id=109 op=LOAD Mar 17 18:19:35.341000 audit[2903]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2889 pid=2903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343738386262363937323835643733323738303662333461356237 Mar 17 18:19:35.462000 audit[2099]: USER_END pid=2099 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:19:35.462000 audit[2099]: CRED_DISP pid=2099 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Mar 17 18:19:35.489630 sshd[2096]: pam_unix(sshd:session): session closed for user core Mar 17 18:19:35.494000 audit[2096]: USER_END pid=2096 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:19:35.495000 audit[2096]: CRED_DISP pid=2096 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:19:35.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.97:22-139.178.89.65:43218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:19:35.498916 systemd[1]: sshd@6-172.31.25.97:22-139.178.89.65:43218.service: Deactivated successfully. Mar 17 18:19:35.500762 systemd[1]: session-7.scope: Deactivated successfully. Mar 17 18:19:35.501103 systemd[1]: session-7.scope: Consumed 9.835s CPU time. Mar 17 18:19:35.503737 systemd-logind[1810]: Session 7 logged out. Waiting for processes to exit. Mar 17 18:19:35.507922 systemd-logind[1810]: Removed session 7. Mar 17 18:19:35.509886 env[1816]: time="2025-03-17T18:19:35.509819437Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7d68577dc5-nc4b5,Uid:83119b99-ade9-4f6e-b364-2dfc7a577af4,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac\"" Mar 17 18:19:35.513594 env[1816]: time="2025-03-17T18:19:35.513541212Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\"" Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.526000 audit: BPF prog-id=110 op=LOAD Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2930 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339613532336232376462663537306266623335353835643465353233 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2930 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339613532336232376462663537306266623335353835643465353233 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit: BPF prog-id=111 op=LOAD Mar 17 18:19:35.527000 audit[2940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2930 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339613532336232376462663537306266623335353835643465353233 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.527000 audit: BPF prog-id=112 op=LOAD Mar 17 18:19:35.527000 audit[2940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2930 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339613532336232376462663537306266623335353835643465353233 Mar 17 18:19:35.528000 audit: BPF prog-id=112 op=UNLOAD Mar 17 18:19:35.528000 audit: BPF prog-id=111 op=UNLOAD Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { perfmon } for pid=2940 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit[2940]: AVC avc: denied { bpf } for pid=2940 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.528000 audit: BPF prog-id=113 op=LOAD Mar 17 18:19:35.528000 audit[2940]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2930 pid=2940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339613532336232376462663537306266623335353835643465353233 Mar 17 18:19:35.552641 env[1816]: time="2025-03-17T18:19:35.552587043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dzxp4,Uid:f1b81078-ddfa-4866-9ee0-0360c5ac59b9,Namespace:kube-system,Attempt:0,} returns sandbox id \"c9a523b27dbf570bfb35585d4e523615b1b30e642fc020aff2b5d5cec84faf9a\"" Mar 17 18:19:35.557308 env[1816]: time="2025-03-17T18:19:35.557249037Z" level=info msg="CreateContainer within sandbox \"c9a523b27dbf570bfb35585d4e523615b1b30e642fc020aff2b5d5cec84faf9a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Mar 17 18:19:35.581475 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1190979785.mount: Deactivated successfully. Mar 17 18:19:35.597767 env[1816]: time="2025-03-17T18:19:35.597695016Z" level=info msg="CreateContainer within sandbox \"c9a523b27dbf570bfb35585d4e523615b1b30e642fc020aff2b5d5cec84faf9a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"2fee402b0040d335610e74254c88f5b487ecf71b21cb9aaacf016751033f9d35\"" Mar 17 18:19:35.600576 env[1816]: time="2025-03-17T18:19:35.599431515Z" level=info msg="StartContainer for \"2fee402b0040d335610e74254c88f5b487ecf71b21cb9aaacf016751033f9d35\"" Mar 17 18:19:35.634933 systemd[1]: Started cri-containerd-2fee402b0040d335610e74254c88f5b487ecf71b21cb9aaacf016751033f9d35.scope. Mar 17 18:19:35.680000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.680000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2930 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656534303262303034306433333536313065373432353463383866 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.681000 audit: BPF prog-id=114 op=LOAD Mar 17 18:19:35.681000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2930 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656534303262303034306433333536313065373432353463383866 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit: BPF prog-id=115 op=LOAD Mar 17 18:19:35.686000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2930 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656534303262303034306433333536313065373432353463383866 Mar 17 18:19:35.686000 audit: BPF prog-id=115 op=UNLOAD Mar 17 18:19:35.686000 audit: BPF prog-id=114 op=UNLOAD Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { perfmon } for pid=2982 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit[2982]: AVC avc: denied { bpf } for pid=2982 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:35.686000 audit: BPF prog-id=116 op=LOAD Mar 17 18:19:35.686000 audit[2982]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2930 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266656534303262303034306433333536313065373432353463383866 Mar 17 18:19:35.720176 env[1816]: time="2025-03-17T18:19:35.719967471Z" level=info msg="StartContainer for \"2fee402b0040d335610e74254c88f5b487ecf71b21cb9aaacf016751033f9d35\" returns successfully" Mar 17 18:19:35.956000 audit[3044]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3044 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:35.956000 audit[3044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7894c40 a2=0 a3=1 items=0 ppid=2993 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:19:35.965000 audit[3043]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=3043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:35.965000 audit[3043]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe9d90b90 a2=0 a3=1 items=0 ppid=2993 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.965000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Mar 17 18:19:35.968000 audit[3045]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=3045 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:35.968000 audit[3045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe3670050 a2=0 a3=1 items=0 ppid=2993 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:19:35.971000 audit[3046]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=3046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:35.971000 audit[3046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda814f50 a2=0 a3=1 items=0 ppid=2993 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.971000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Mar 17 18:19:35.973000 audit[3048]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:35.973000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3130d30 a2=0 a3=1 items=0 ppid=2993 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:19:35.976000 audit[3049]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3049 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:35.976000 audit[3049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffd54af70 a2=0 a3=1 items=0 ppid=2993 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:35.976000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Mar 17 18:19:36.053000 audit[3050]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.053000 audit[3050]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd1d3ec30 a2=0 a3=1 items=0 ppid=2993 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.053000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:19:36.058000 audit[3052]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.058000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe434ece0 a2=0 a3=1 items=0 ppid=2993 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.058000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Mar 17 18:19:36.066000 audit[3055]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.066000 audit[3055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffce3dc540 a2=0 a3=1 items=0 ppid=2993 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Mar 17 18:19:36.068000 audit[3056]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.068000 audit[3056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4d451f0 a2=0 a3=1 items=0 ppid=2993 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.068000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:19:36.075000 audit[3058]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.075000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe03456e0 a2=0 a3=1 items=0 ppid=2993 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.075000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:19:36.078000 audit[3059]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.078000 audit[3059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6716e70 a2=0 a3=1 items=0 ppid=2993 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:19:36.083000 audit[3061]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.083000 audit[3061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd5795aa0 a2=0 a3=1 items=0 ppid=2993 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:19:36.091000 audit[3064]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.091000 audit[3064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc5342fb0 a2=0 a3=1 items=0 ppid=2993 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Mar 17 18:19:36.094000 audit[3065]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.094000 audit[3065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffce306ba0 a2=0 a3=1 items=0 ppid=2993 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:19:36.099000 audit[3067]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.099000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc9c641f0 a2=0 a3=1 items=0 ppid=2993 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:19:36.102000 audit[3068]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.102000 audit[3068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc8b05740 a2=0 a3=1 items=0 ppid=2993 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.102000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:19:36.107000 audit[3070]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.107000 audit[3070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffb9d4250 a2=0 a3=1 items=0 ppid=2993 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:19:36.114000 audit[3073]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.114000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc0392590 a2=0 a3=1 items=0 ppid=2993 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:19:36.122000 audit[3076]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.122000 audit[3076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd333fba0 a2=0 a3=1 items=0 ppid=2993 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.122000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:19:36.125000 audit[3077]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.125000 audit[3077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe4347f70 a2=0 a3=1 items=0 ppid=2993 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:19:36.130000 audit[3079]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.130000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffdb45e5e0 a2=0 a3=1 items=0 ppid=2993 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.130000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:19:36.138000 audit[3082]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.138000 audit[3082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe748b370 a2=0 a3=1 items=0 ppid=2993 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:19:36.140000 audit[3083]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.140000 audit[3083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd532d1e0 a2=0 a3=1 items=0 ppid=2993 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.140000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:19:36.148000 audit[3085]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Mar 17 18:19:36.148000 audit[3085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd6e1bd20 a2=0 a3=1 items=0 ppid=2993 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.148000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:19:36.199000 audit[3091]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3091 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:36.199000 audit[3091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe855ddd0 a2=0 a3=1 items=0 ppid=2993 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.199000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:36.214000 audit[3091]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3091 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:36.214000 audit[3091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe855ddd0 a2=0 a3=1 items=0 ppid=2993 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.214000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:36.217000 audit[3096]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3096 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.217000 audit[3096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffffaa21c40 a2=0 a3=1 items=0 ppid=2993 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.217000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Mar 17 18:19:36.223000 audit[3098]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.223000 audit[3098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffef260c10 a2=0 a3=1 items=0 ppid=2993 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.223000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Mar 17 18:19:36.235000 audit[3101]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.235000 audit[3101]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffc827e20 a2=0 a3=1 items=0 ppid=2993 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Mar 17 18:19:36.237000 audit[3102]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.237000 audit[3102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe511e640 a2=0 a3=1 items=0 ppid=2993 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.237000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Mar 17 18:19:36.243000 audit[3104]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.243000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcedb8f90 a2=0 a3=1 items=0 ppid=2993 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.243000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Mar 17 18:19:36.245000 audit[3105]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.245000 audit[3105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd50747a0 a2=0 a3=1 items=0 ppid=2993 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.245000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Mar 17 18:19:36.253000 audit[3107]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.253000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd327aeb0 a2=0 a3=1 items=0 ppid=2993 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.253000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Mar 17 18:19:36.262000 audit[3110]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.262000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd6b6dc60 a2=0 a3=1 items=0 ppid=2993 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.262000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Mar 17 18:19:36.265000 audit[3111]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3111 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.265000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffed3f8ce0 a2=0 a3=1 items=0 ppid=2993 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.265000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Mar 17 18:19:36.269000 audit[3113]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.269000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffccd3d350 a2=0 a3=1 items=0 ppid=2993 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.269000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Mar 17 18:19:36.272000 audit[3114]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.272000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffde567dc0 a2=0 a3=1 items=0 ppid=2993 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Mar 17 18:19:36.277000 audit[3116]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.277000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc4b9ee30 a2=0 a3=1 items=0 ppid=2993 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.277000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Mar 17 18:19:36.284000 audit[3119]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.284000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcf416580 a2=0 a3=1 items=0 ppid=2993 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.284000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Mar 17 18:19:36.293000 audit[3122]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.293000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe28338c0 a2=0 a3=1 items=0 ppid=2993 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.293000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Mar 17 18:19:36.295000 audit[3123]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3123 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.295000 audit[3123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff21f3b90 a2=0 a3=1 items=0 ppid=2993 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.295000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Mar 17 18:19:36.299000 audit[3125]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.299000 audit[3125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc479af30 a2=0 a3=1 items=0 ppid=2993 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.299000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:19:36.306000 audit[3128]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.306000 audit[3128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffef29bd80 a2=0 a3=1 items=0 ppid=2993 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.306000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Mar 17 18:19:36.308000 audit[3129]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3129 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.308000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2902810 a2=0 a3=1 items=0 ppid=2993 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.308000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Mar 17 18:19:36.313000 audit[3131]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3131 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.313000 audit[3131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffdf44bbf0 a2=0 a3=1 items=0 ppid=2993 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.313000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Mar 17 18:19:36.315000 audit[3132]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3132 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.315000 audit[3132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe7932fb0 a2=0 a3=1 items=0 ppid=2993 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.315000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Mar 17 18:19:36.321000 audit[3134]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.321000 audit[3134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdda28870 a2=0 a3=1 items=0 ppid=2993 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.321000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:19:36.329000 audit[3137]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3137 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Mar 17 18:19:36.329000 audit[3137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffefbed10 a2=0 a3=1 items=0 ppid=2993 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.329000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Mar 17 18:19:36.335000 audit[3139]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:19:36.335000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffffba63e10 a2=0 a3=1 items=0 ppid=2993 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.335000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:36.337000 audit[3139]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Mar 17 18:19:36.337000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffffba63e10 a2=0 a3=1 items=0 ppid=2993 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:36.337000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:36.389877 kubelet[2815]: I0317 18:19:36.389598 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-dzxp4" podStartSLOduration=3.389576743 podStartE2EDuration="3.389576743s" podCreationTimestamp="2025-03-17 18:19:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:19:36.389514019 +0000 UTC m=+7.383514422" watchObservedRunningTime="2025-03-17 18:19:36.389576743 +0000 UTC m=+7.383577110" Mar 17 18:19:36.442896 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1809083409.mount: Deactivated successfully. Mar 17 18:19:37.431756 amazon-ssm-agent[1793]: 2025-03-17 18:19:37 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Mar 17 18:19:37.825500 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1207928023.mount: Deactivated successfully. Mar 17 18:19:41.267887 env[1816]: time="2025-03-17T18:19:41.267824998Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:41.270076 env[1816]: time="2025-03-17T18:19:41.270024901Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30d521e4e84764b396aacbb2a373ca7a573f84571e3955b34329652acccfb73c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:41.272574 env[1816]: time="2025-03-17T18:19:41.272528056Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.36.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:41.274974 env[1816]: time="2025-03-17T18:19:41.274909396Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:fc9ea45f2475fd99db1b36d2ff180a50017b1a5ea0e82a171c6b439b3a620764,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:41.276353 env[1816]: time="2025-03-17T18:19:41.276307203Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.36.2\" returns image reference \"sha256:30d521e4e84764b396aacbb2a373ca7a573f84571e3955b34329652acccfb73c\"" Mar 17 18:19:41.281885 env[1816]: time="2025-03-17T18:19:41.281826724Z" level=info msg="CreateContainer within sandbox \"d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Mar 17 18:19:41.309953 env[1816]: time="2025-03-17T18:19:41.309891142Z" level=info msg="CreateContainer within sandbox \"d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09\"" Mar 17 18:19:41.310920 env[1816]: time="2025-03-17T18:19:41.310873894Z" level=info msg="StartContainer for \"fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09\"" Mar 17 18:19:41.362728 systemd[1]: Started cri-containerd-fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09.scope. Mar 17 18:19:41.415052 kernel: kauditd_printk_skb: 305 callbacks suppressed Mar 17 18:19:41.415150 kernel: audit: type=1400 audit(1742235581.404:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.422167 kernel: audit: type=1400 audit(1742235581.413:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.429042 kernel: audit: type=1400 audit(1742235581.413:918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.436245 kernel: audit: type=1400 audit(1742235581.413:919): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.451151 kernel: audit: type=1400 audit(1742235581.413:920): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.451263 kernel: audit: type=1400 audit(1742235581.413:921): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.460216 kernel: audit: type=1400 audit(1742235581.413:922): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.470649 kernel: audit: type=1400 audit(1742235581.413:923): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.477852 kernel: audit: type=1400 audit(1742235581.413:924): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.485028 kernel: audit: type=1400 audit(1742235581.413:925): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.413000 audit: BPF prog-id=117 op=LOAD Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2889 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:41.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663623437396637353932346637343065303637373761386138316237 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2889 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:41.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663623437396637353932346637343065303637373761386138316237 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.414000 audit: BPF prog-id=118 op=LOAD Mar 17 18:19:41.414000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2889 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:41.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663623437396637353932346637343065303637373761386138316237 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit: BPF prog-id=119 op=LOAD Mar 17 18:19:41.421000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2889 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:41.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663623437396637353932346637343065303637373761386138316237 Mar 17 18:19:41.421000 audit: BPF prog-id=119 op=UNLOAD Mar 17 18:19:41.421000 audit: BPF prog-id=118 op=UNLOAD Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { perfmon } for pid=3149 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit[3149]: AVC avc: denied { bpf } for pid=3149 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:41.421000 audit: BPF prog-id=120 op=LOAD Mar 17 18:19:41.421000 audit[3149]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2889 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:41.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663623437396637353932346637343065303637373761386138316237 Mar 17 18:19:41.494048 env[1816]: time="2025-03-17T18:19:41.493973885Z" level=info msg="StartContainer for \"fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09\" returns successfully" Mar 17 18:19:42.292316 systemd[1]: run-containerd-runc-k8s.io-fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09-runc.ljNnXd.mount: Deactivated successfully. Mar 17 18:19:46.087000 audit[3180]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:46.087000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc1d44bf0 a2=0 a3=1 items=0 ppid=2993 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:46.087000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:46.096000 audit[3180]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:46.096000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc1d44bf0 a2=0 a3=1 items=0 ppid=2993 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:46.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:46.111000 audit[3182]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:46.111000 audit[3182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc96b5740 a2=0 a3=1 items=0 ppid=2993 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:46.111000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:46.118000 audit[3182]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:46.118000 audit[3182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc96b5740 a2=0 a3=1 items=0 ppid=2993 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:46.118000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:47.552000 audit[3184]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:47.556216 kernel: kauditd_printk_skb: 59 callbacks suppressed Mar 17 18:19:47.556329 kernel: audit: type=1325 audit(1742235587.552:938): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:47.552000 audit[3184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe9956f90 a2=0 a3=1 items=0 ppid=2993 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:47.552000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:47.581004 kernel: audit: type=1300 audit(1742235587.552:938): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe9956f90 a2=0 a3=1 items=0 ppid=2993 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:47.581125 kernel: audit: type=1327 audit(1742235587.552:938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:47.581000 audit[3184]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:47.589260 kernel: audit: type=1325 audit(1742235587.581:939): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:47.581000 audit[3184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe9956f90 a2=0 a3=1 items=0 ppid=2993 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:47.601257 kernel: audit: type=1300 audit(1742235587.581:939): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe9956f90 a2=0 a3=1 items=0 ppid=2993 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:47.601406 kernel: audit: type=1327 audit(1742235587.581:939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:47.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:47.636124 kubelet[2815]: I0317 18:19:47.636005 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7d68577dc5-nc4b5" podStartSLOduration=8.870700217 podStartE2EDuration="14.635984395s" podCreationTimestamp="2025-03-17 18:19:33 +0000 UTC" firstStartedPulling="2025-03-17 18:19:35.512525338 +0000 UTC m=+6.506525705" lastFinishedPulling="2025-03-17 18:19:41.277809516 +0000 UTC m=+12.271809883" observedRunningTime="2025-03-17 18:19:42.417399689 +0000 UTC m=+13.411400068" watchObservedRunningTime="2025-03-17 18:19:47.635984395 +0000 UTC m=+18.629984774" Mar 17 18:19:47.647872 systemd[1]: Created slice kubepods-besteffort-pod7dee6a1b_eca0_439c_a7b0_253dd5a2ffaa.slice. Mar 17 18:19:47.670618 kubelet[2815]: W0317 18:19:47.670534 2815 reflector.go:569] object-"calico-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-25-97" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-25-97' and this object Mar 17 18:19:47.670818 kubelet[2815]: E0317 18:19:47.670633 2815 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-97' and this object" logger="UnhandledError" Mar 17 18:19:47.670818 kubelet[2815]: I0317 18:19:47.670525 2815 status_manager.go:890] "Failed to get status for pod" podUID="7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa" pod="calico-system/calico-typha-786cb64d79-wk2pw" err="pods \"calico-typha-786cb64d79-wk2pw\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-97' and this object" Mar 17 18:19:47.671167 kubelet[2815]: W0317 18:19:47.671137 2815 reflector.go:569] object-"calico-system"/"typha-certs": failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:ip-172-31-25-97" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-25-97' and this object Mar 17 18:19:47.671380 kubelet[2815]: E0317 18:19:47.671342 2815 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"typha-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"typha-certs\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-97' and this object" logger="UnhandledError" Mar 17 18:19:47.671567 kubelet[2815]: W0317 18:19:47.671144 2815 reflector.go:569] object-"calico-system"/"tigera-ca-bundle": failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:ip-172-31-25-97" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-25-97' and this object Mar 17 18:19:47.671712 kubelet[2815]: E0317 18:19:47.671678 2815 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"tigera-ca-bundle\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"tigera-ca-bundle\" is forbidden: User \"system:node:ip-172-31-25-97\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-97' and this object" logger="UnhandledError" Mar 17 18:19:47.756414 kubelet[2815]: I0317 18:19:47.756368 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa-typha-certs\") pod \"calico-typha-786cb64d79-wk2pw\" (UID: \"7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa\") " pod="calico-system/calico-typha-786cb64d79-wk2pw" Mar 17 18:19:47.756653 kubelet[2815]: I0317 18:19:47.756617 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ncvd7\" (UniqueName: \"kubernetes.io/projected/7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa-kube-api-access-ncvd7\") pod \"calico-typha-786cb64d79-wk2pw\" (UID: \"7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa\") " pod="calico-system/calico-typha-786cb64d79-wk2pw" Mar 17 18:19:47.756810 kubelet[2815]: I0317 18:19:47.756782 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa-tigera-ca-bundle\") pod \"calico-typha-786cb64d79-wk2pw\" (UID: \"7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa\") " pod="calico-system/calico-typha-786cb64d79-wk2pw" Mar 17 18:19:47.905302 systemd[1]: Created slice kubepods-besteffort-podaf875e4a_ddef_4aee_b015_ce0fd9d7e193.slice. Mar 17 18:19:47.958063 kubelet[2815]: I0317 18:19:47.957936 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-cni-log-dir\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958403 kubelet[2815]: I0317 18:19:47.958105 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-policysync\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958403 kubelet[2815]: I0317 18:19:47.958270 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-cni-net-dir\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958403 kubelet[2815]: I0317 18:19:47.958341 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4grx5\" (UniqueName: \"kubernetes.io/projected/af875e4a-ddef-4aee-b015-ce0fd9d7e193-kube-api-access-4grx5\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958607 kubelet[2815]: I0317 18:19:47.958387 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-xtables-lock\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958607 kubelet[2815]: I0317 18:19:47.958477 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-var-lib-calico\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958741 kubelet[2815]: I0317 18:19:47.958624 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/af875e4a-ddef-4aee-b015-ce0fd9d7e193-tigera-ca-bundle\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958741 kubelet[2815]: I0317 18:19:47.958728 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/af875e4a-ddef-4aee-b015-ce0fd9d7e193-node-certs\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958866 kubelet[2815]: I0317 18:19:47.958769 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-var-run-calico\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.958932 kubelet[2815]: I0317 18:19:47.958881 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-lib-modules\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.959000 kubelet[2815]: I0317 18:19:47.958924 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-cni-bin-dir\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:47.959072 kubelet[2815]: I0317 18:19:47.959010 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/af875e4a-ddef-4aee-b015-ce0fd9d7e193-flexvol-driver-host\") pod \"calico-node-h9h2c\" (UID: \"af875e4a-ddef-4aee-b015-ce0fd9d7e193\") " pod="calico-system/calico-node-h9h2c" Mar 17 18:19:48.077736 kubelet[2815]: E0317 18:19:48.077632 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.077736 kubelet[2815]: W0317 18:19:48.077694 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.077736 kubelet[2815]: E0317 18:19:48.077761 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.121478 kubelet[2815]: E0317 18:19:48.121422 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:19:48.130465 kubelet[2815]: E0317 18:19:48.130382 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.130465 kubelet[2815]: W0317 18:19:48.130442 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.130777 kubelet[2815]: E0317 18:19:48.130475 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.131276 kubelet[2815]: E0317 18:19:48.131193 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.131431 kubelet[2815]: W0317 18:19:48.131269 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.131431 kubelet[2815]: E0317 18:19:48.131398 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.131997 kubelet[2815]: E0317 18:19:48.131954 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.132166 kubelet[2815]: W0317 18:19:48.132008 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.132166 kubelet[2815]: E0317 18:19:48.132038 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.132686 kubelet[2815]: E0317 18:19:48.132641 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.132802 kubelet[2815]: W0317 18:19:48.132692 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.132802 kubelet[2815]: E0317 18:19:48.132723 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.135507 kubelet[2815]: E0317 18:19:48.135445 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.135507 kubelet[2815]: W0317 18:19:48.135486 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.135774 kubelet[2815]: E0317 18:19:48.135544 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.136157 kubelet[2815]: E0317 18:19:48.136119 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.136364 kubelet[2815]: W0317 18:19:48.136168 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.136364 kubelet[2815]: E0317 18:19:48.136196 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.136845 kubelet[2815]: E0317 18:19:48.136807 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.136950 kubelet[2815]: W0317 18:19:48.136838 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.136950 kubelet[2815]: E0317 18:19:48.136890 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.137380 kubelet[2815]: E0317 18:19:48.137343 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.137486 kubelet[2815]: W0317 18:19:48.137378 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.137486 kubelet[2815]: E0317 18:19:48.137404 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.137815 kubelet[2815]: E0317 18:19:48.137781 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.137815 kubelet[2815]: W0317 18:19:48.137808 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.137962 kubelet[2815]: E0317 18:19:48.137833 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.138328 kubelet[2815]: E0317 18:19:48.138282 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.138328 kubelet[2815]: W0317 18:19:48.138311 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.138499 kubelet[2815]: E0317 18:19:48.138360 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.139922 kubelet[2815]: E0317 18:19:48.139871 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.139922 kubelet[2815]: W0317 18:19:48.139910 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.140166 kubelet[2815]: E0317 18:19:48.139942 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.140418 kubelet[2815]: E0317 18:19:48.140382 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.140418 kubelet[2815]: W0317 18:19:48.140411 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.140561 kubelet[2815]: E0317 18:19:48.140436 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.140917 kubelet[2815]: E0317 18:19:48.140880 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.140917 kubelet[2815]: W0317 18:19:48.140909 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.141085 kubelet[2815]: E0317 18:19:48.140943 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.141335 kubelet[2815]: E0317 18:19:48.141300 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.141335 kubelet[2815]: W0317 18:19:48.141327 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.141515 kubelet[2815]: E0317 18:19:48.141352 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.141893 kubelet[2815]: E0317 18:19:48.141856 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.141893 kubelet[2815]: W0317 18:19:48.141886 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.142064 kubelet[2815]: E0317 18:19:48.141912 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.142344 kubelet[2815]: E0317 18:19:48.142310 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.142444 kubelet[2815]: W0317 18:19:48.142348 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.142444 kubelet[2815]: E0317 18:19:48.142372 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.142858 kubelet[2815]: E0317 18:19:48.142822 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.142858 kubelet[2815]: W0317 18:19:48.142852 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.143036 kubelet[2815]: E0317 18:19:48.142877 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.143249 kubelet[2815]: E0317 18:19:48.143191 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.143249 kubelet[2815]: W0317 18:19:48.143239 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.143397 kubelet[2815]: E0317 18:19:48.143262 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.145521 kubelet[2815]: E0317 18:19:48.145466 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.145521 kubelet[2815]: W0317 18:19:48.145507 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.145801 kubelet[2815]: E0317 18:19:48.145544 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.146426 kubelet[2815]: E0317 18:19:48.146378 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.146426 kubelet[2815]: W0317 18:19:48.146414 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.146784 kubelet[2815]: E0317 18:19:48.146447 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.161533 kubelet[2815]: E0317 18:19:48.161379 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.161533 kubelet[2815]: W0317 18:19:48.161415 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.161533 kubelet[2815]: E0317 18:19:48.161447 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.161533 kubelet[2815]: I0317 18:19:48.161501 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-npfsv\" (UniqueName: \"kubernetes.io/projected/75dff536-0e33-4ad9-9dd6-831e7b94f681-kube-api-access-npfsv\") pod \"csi-node-driver-2l2mt\" (UID: \"75dff536-0e33-4ad9-9dd6-831e7b94f681\") " pod="calico-system/csi-node-driver-2l2mt" Mar 17 18:19:48.166350 kubelet[2815]: E0317 18:19:48.166302 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.166350 kubelet[2815]: W0317 18:19:48.166340 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.166619 kubelet[2815]: E0317 18:19:48.166389 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.166619 kubelet[2815]: I0317 18:19:48.166434 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/75dff536-0e33-4ad9-9dd6-831e7b94f681-registration-dir\") pod \"csi-node-driver-2l2mt\" (UID: \"75dff536-0e33-4ad9-9dd6-831e7b94f681\") " pod="calico-system/csi-node-driver-2l2mt" Mar 17 18:19:48.166854 kubelet[2815]: E0317 18:19:48.166824 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.166972 kubelet[2815]: W0317 18:19:48.166853 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.167091 kubelet[2815]: E0317 18:19:48.167062 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.167262 kubelet[2815]: I0317 18:19:48.167235 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/75dff536-0e33-4ad9-9dd6-831e7b94f681-kubelet-dir\") pod \"csi-node-driver-2l2mt\" (UID: \"75dff536-0e33-4ad9-9dd6-831e7b94f681\") " pod="calico-system/csi-node-driver-2l2mt" Mar 17 18:19:48.167788 kubelet[2815]: E0317 18:19:48.167750 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.167941 kubelet[2815]: W0317 18:19:48.167787 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.168088 kubelet[2815]: E0317 18:19:48.168057 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.168267 kubelet[2815]: E0317 18:19:48.168169 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.168406 kubelet[2815]: W0317 18:19:48.168379 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.168598 kubelet[2815]: E0317 18:19:48.168560 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.169046 kubelet[2815]: E0317 18:19:48.169020 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.169221 kubelet[2815]: W0317 18:19:48.169175 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.169431 kubelet[2815]: E0317 18:19:48.169383 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.169508 kubelet[2815]: I0317 18:19:48.169449 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/75dff536-0e33-4ad9-9dd6-831e7b94f681-varrun\") pod \"csi-node-driver-2l2mt\" (UID: \"75dff536-0e33-4ad9-9dd6-831e7b94f681\") " pod="calico-system/csi-node-driver-2l2mt" Mar 17 18:19:48.172500 kubelet[2815]: E0317 18:19:48.172461 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.172739 kubelet[2815]: W0317 18:19:48.172708 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.172947 kubelet[2815]: E0317 18:19:48.172902 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.173429 kubelet[2815]: E0317 18:19:48.173400 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.173613 kubelet[2815]: W0317 18:19:48.173584 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.173778 kubelet[2815]: E0317 18:19:48.173751 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.174870 kubelet[2815]: E0317 18:19:48.174337 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.174870 kubelet[2815]: W0317 18:19:48.174375 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.174870 kubelet[2815]: E0317 18:19:48.174407 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.175971 kubelet[2815]: E0317 18:19:48.175782 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.175971 kubelet[2815]: W0317 18:19:48.175821 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.175971 kubelet[2815]: E0317 18:19:48.175854 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.176823 kubelet[2815]: E0317 18:19:48.176297 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.176823 kubelet[2815]: W0317 18:19:48.176328 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.176823 kubelet[2815]: E0317 18:19:48.176353 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.176823 kubelet[2815]: E0317 18:19:48.176711 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.176823 kubelet[2815]: W0317 18:19:48.176730 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.176823 kubelet[2815]: E0317 18:19:48.176751 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.177361 kubelet[2815]: E0317 18:19:48.177121 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.177361 kubelet[2815]: W0317 18:19:48.177141 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.177361 kubelet[2815]: E0317 18:19:48.177164 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.177361 kubelet[2815]: I0317 18:19:48.177234 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/75dff536-0e33-4ad9-9dd6-831e7b94f681-socket-dir\") pod \"csi-node-driver-2l2mt\" (UID: \"75dff536-0e33-4ad9-9dd6-831e7b94f681\") " pod="calico-system/csi-node-driver-2l2mt" Mar 17 18:19:48.178250 kubelet[2815]: E0317 18:19:48.177593 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.178250 kubelet[2815]: W0317 18:19:48.177626 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.178250 kubelet[2815]: E0317 18:19:48.177649 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.178250 kubelet[2815]: E0317 18:19:48.177964 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.178250 kubelet[2815]: W0317 18:19:48.177981 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.178250 kubelet[2815]: E0317 18:19:48.178001 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.278372 kubelet[2815]: E0317 18:19:48.278321 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.278372 kubelet[2815]: W0317 18:19:48.278361 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.278628 kubelet[2815]: E0317 18:19:48.278396 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.278971 kubelet[2815]: E0317 18:19:48.278933 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.278971 kubelet[2815]: W0317 18:19:48.278963 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.279117 kubelet[2815]: E0317 18:19:48.279008 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.279537 kubelet[2815]: E0317 18:19:48.279496 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.279537 kubelet[2815]: W0317 18:19:48.279530 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.279756 kubelet[2815]: E0317 18:19:48.279571 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.280117 kubelet[2815]: E0317 18:19:48.280081 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.280117 kubelet[2815]: W0317 18:19:48.280109 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.280341 kubelet[2815]: E0317 18:19:48.280141 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.280578 kubelet[2815]: E0317 18:19:48.280526 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.280578 kubelet[2815]: W0317 18:19:48.280566 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.280748 kubelet[2815]: E0317 18:19:48.280724 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.281057 kubelet[2815]: E0317 18:19:48.281030 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.281057 kubelet[2815]: W0317 18:19:48.281055 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.281257 kubelet[2815]: E0317 18:19:48.281199 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.281540 kubelet[2815]: E0317 18:19:48.281512 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.281617 kubelet[2815]: W0317 18:19:48.281539 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.281617 kubelet[2815]: E0317 18:19:48.281584 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.281979 kubelet[2815]: E0317 18:19:48.281952 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.282070 kubelet[2815]: W0317 18:19:48.281978 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.282070 kubelet[2815]: E0317 18:19:48.282014 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.282417 kubelet[2815]: E0317 18:19:48.282389 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.282498 kubelet[2815]: W0317 18:19:48.282419 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.282498 kubelet[2815]: E0317 18:19:48.282449 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.282864 kubelet[2815]: E0317 18:19:48.282837 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.282961 kubelet[2815]: W0317 18:19:48.282863 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.283076 kubelet[2815]: E0317 18:19:48.283049 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.283277 kubelet[2815]: E0317 18:19:48.283139 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.283277 kubelet[2815]: W0317 18:19:48.283273 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.283513 kubelet[2815]: E0317 18:19:48.283488 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.283853 kubelet[2815]: E0317 18:19:48.283827 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.283956 kubelet[2815]: W0317 18:19:48.283852 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.284026 kubelet[2815]: E0317 18:19:48.284010 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.284291 kubelet[2815]: E0317 18:19:48.284264 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.284379 kubelet[2815]: W0317 18:19:48.284289 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.284471 kubelet[2815]: E0317 18:19:48.284439 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.284770 kubelet[2815]: E0317 18:19:48.284744 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.284868 kubelet[2815]: W0317 18:19:48.284768 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.284944 kubelet[2815]: E0317 18:19:48.284907 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.285130 kubelet[2815]: E0317 18:19:48.285105 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.285246 kubelet[2815]: W0317 18:19:48.285129 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.285338 kubelet[2815]: E0317 18:19:48.285294 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.285612 kubelet[2815]: E0317 18:19:48.285587 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.285696 kubelet[2815]: W0317 18:19:48.285611 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.285764 kubelet[2815]: E0317 18:19:48.285750 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.285980 kubelet[2815]: E0317 18:19:48.285956 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.286064 kubelet[2815]: W0317 18:19:48.285979 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.286144 kubelet[2815]: E0317 18:19:48.286127 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.286588 kubelet[2815]: E0317 18:19:48.286534 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.286588 kubelet[2815]: W0317 18:19:48.286559 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.286736 kubelet[2815]: E0317 18:19:48.286704 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.286919 kubelet[2815]: E0317 18:19:48.286895 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.287012 kubelet[2815]: W0317 18:19:48.286918 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.287135 kubelet[2815]: E0317 18:19:48.287102 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.287646 kubelet[2815]: E0317 18:19:48.287586 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.287646 kubelet[2815]: W0317 18:19:48.287621 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.287868 kubelet[2815]: E0317 18:19:48.287840 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.288189 kubelet[2815]: E0317 18:19:48.288161 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.288332 kubelet[2815]: W0317 18:19:48.288187 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.288487 kubelet[2815]: E0317 18:19:48.288451 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.290484 kubelet[2815]: E0317 18:19:48.290449 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.290727 kubelet[2815]: W0317 18:19:48.290700 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.291151 kubelet[2815]: E0317 18:19:48.291123 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.293106 kubelet[2815]: E0317 18:19:48.293070 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.293360 kubelet[2815]: W0317 18:19:48.293333 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.293696 kubelet[2815]: E0317 18:19:48.293670 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.293937 kubelet[2815]: E0317 18:19:48.293917 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.294054 kubelet[2815]: W0317 18:19:48.294031 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.294447 kubelet[2815]: E0317 18:19:48.294422 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.294705 kubelet[2815]: E0317 18:19:48.294686 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.294829 kubelet[2815]: W0317 18:19:48.294805 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.294960 kubelet[2815]: E0317 18:19:48.294937 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.657255 kubelet[2815]: E0317 18:19:48.656779 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.657255 kubelet[2815]: W0317 18:19:48.656818 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.657255 kubelet[2815]: E0317 18:19:48.656852 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.664000 audit[3248]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:48.668401 kubelet[2815]: E0317 18:19:48.668367 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.668583 kubelet[2815]: W0317 18:19:48.668557 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.668709 kubelet[2815]: E0317 18:19:48.668683 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.664000 audit[3248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffecd29b80 a2=0 a3=1 items=0 ppid=2993 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:48.690230 kernel: audit: type=1325 audit(1742235588.664:940): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:48.690488 kernel: audit: type=1300 audit(1742235588.664:940): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffecd29b80 a2=0 a3=1 items=0 ppid=2993 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:48.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:48.706303 kernel: audit: type=1327 audit(1742235588.664:940): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:48.706471 kubelet[2815]: E0317 18:19:48.706424 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.706471 kubelet[2815]: W0317 18:19:48.706465 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.706668 kubelet[2815]: E0317 18:19:48.706500 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.699000 audit[3248]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:48.718324 kernel: audit: type=1325 audit(1742235588.699:941): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:19:48.699000 audit[3248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffecd29b80 a2=0 a3=1 items=0 ppid=2993 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:48.699000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:19:48.854432 kubelet[2815]: E0317 18:19:48.854388 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.854704 kubelet[2815]: W0317 18:19:48.854669 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.854857 kubelet[2815]: E0317 18:19:48.854830 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.864286 kubelet[2815]: E0317 18:19:48.863072 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.864286 kubelet[2815]: W0317 18:19:48.863112 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.864286 kubelet[2815]: E0317 18:19:48.863146 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:48.866102 kubelet[2815]: E0317 18:19:48.866052 2815 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Mar 17 18:19:48.866354 kubelet[2815]: W0317 18:19:48.866322 2815 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Mar 17 18:19:48.866494 kubelet[2815]: E0317 18:19:48.866465 2815 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Mar 17 18:19:49.115589 env[1816]: time="2025-03-17T18:19:49.115363772Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-h9h2c,Uid:af875e4a-ddef-4aee-b015-ce0fd9d7e193,Namespace:calico-system,Attempt:0,}" Mar 17 18:19:49.148754 env[1816]: time="2025-03-17T18:19:49.147399963Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:19:49.148754 env[1816]: time="2025-03-17T18:19:49.147512599Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:19:49.148754 env[1816]: time="2025-03-17T18:19:49.147540518Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:19:49.148754 env[1816]: time="2025-03-17T18:19:49.147974700Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d pid=3265 runtime=io.containerd.runc.v2 Mar 17 18:19:49.169422 env[1816]: time="2025-03-17T18:19:49.168435666Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-786cb64d79-wk2pw,Uid:7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa,Namespace:calico-system,Attempt:0,}" Mar 17 18:19:49.188345 systemd[1]: Started cri-containerd-0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d.scope. Mar 17 18:19:49.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.245000 audit: BPF prog-id=121 op=LOAD Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3265 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066623139373433366462373462316431313563346565623734363038 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3265 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066623139373433366462373462316431313563346565623734363038 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.246000 audit: BPF prog-id=122 op=LOAD Mar 17 18:19:49.246000 audit[3274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3265 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066623139373433366462373462316431313563346565623734363038 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit: BPF prog-id=123 op=LOAD Mar 17 18:19:49.247000 audit[3274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3265 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066623139373433366462373462316431313563346565623734363038 Mar 17 18:19:49.247000 audit: BPF prog-id=123 op=UNLOAD Mar 17 18:19:49.247000 audit: BPF prog-id=122 op=UNLOAD Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { perfmon } for pid=3274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit[3274]: AVC avc: denied { bpf } for pid=3274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.247000 audit: BPF prog-id=124 op=LOAD Mar 17 18:19:49.247000 audit[3274]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3265 pid=3274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066623139373433366462373462316431313563346565623734363038 Mar 17 18:19:49.269673 env[1816]: time="2025-03-17T18:19:49.269405142Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:19:49.269673 env[1816]: time="2025-03-17T18:19:49.269505631Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:19:49.269673 env[1816]: time="2025-03-17T18:19:49.269545937Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:19:49.270606 env[1816]: time="2025-03-17T18:19:49.270454883Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/526d74563228018cfc53d87f53fe5c178d5c70410093b20e723effff7e8e3663 pid=3297 runtime=io.containerd.runc.v2 Mar 17 18:19:49.319367 systemd[1]: Started cri-containerd-526d74563228018cfc53d87f53fe5c178d5c70410093b20e723effff7e8e3663.scope. Mar 17 18:19:49.328870 env[1816]: time="2025-03-17T18:19:49.328805742Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-h9h2c,Uid:af875e4a-ddef-4aee-b015-ce0fd9d7e193,Namespace:calico-system,Attempt:0,} returns sandbox id \"0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d\"" Mar 17 18:19:49.338522 env[1816]: time="2025-03-17T18:19:49.332526917Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\"" Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.374000 audit: BPF prog-id=125 op=LOAD Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3297 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532366437343536333232383031386366633533643837663533666535 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3297 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532366437343536333232383031386366633533643837663533666535 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.379000 audit: BPF prog-id=126 op=LOAD Mar 17 18:19:49.379000 audit[3308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3297 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532366437343536333232383031386366633533643837663533666535 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit: BPF prog-id=127 op=LOAD Mar 17 18:19:49.380000 audit[3308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3297 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532366437343536333232383031386366633533643837663533666535 Mar 17 18:19:49.380000 audit: BPF prog-id=127 op=UNLOAD Mar 17 18:19:49.380000 audit: BPF prog-id=126 op=UNLOAD Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { perfmon } for pid=3308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit[3308]: AVC avc: denied { bpf } for pid=3308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:49.380000 audit: BPF prog-id=128 op=LOAD Mar 17 18:19:49.380000 audit[3308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3297 pid=3308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:49.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532366437343536333232383031386366633533643837663533666535 Mar 17 18:19:49.455494 env[1816]: time="2025-03-17T18:19:49.455437381Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-786cb64d79-wk2pw,Uid:7dee6a1b-eca0-439c-a7b0-253dd5a2ffaa,Namespace:calico-system,Attempt:0,} returns sandbox id \"526d74563228018cfc53d87f53fe5c178d5c70410093b20e723effff7e8e3663\"" Mar 17 18:19:50.289482 kubelet[2815]: E0317 18:19:50.289403 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:19:51.469984 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount646315478.mount: Deactivated successfully. Mar 17 18:19:51.690505 env[1816]: time="2025-03-17T18:19:51.690442298Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:51.695976 env[1816]: time="2025-03-17T18:19:51.695919480Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ece9bca32e64e726de8bbfc9e175a3ca91e0881cd40352bfcd1d107411f4f348,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:51.700006 env[1816]: time="2025-03-17T18:19:51.699931854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:51.703980 env[1816]: time="2025-03-17T18:19:51.703931301Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:a63f8b4ff531912d12d143664eb263fdbc6cd7b3ff4aa777dfb6e318a090462c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:51.705438 env[1816]: time="2025-03-17T18:19:51.705383674Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.29.1\" returns image reference \"sha256:ece9bca32e64e726de8bbfc9e175a3ca91e0881cd40352bfcd1d107411f4f348\"" Mar 17 18:19:51.709598 env[1816]: time="2025-03-17T18:19:51.709424254Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\"" Mar 17 18:19:51.713063 env[1816]: time="2025-03-17T18:19:51.712978987Z" level=info msg="CreateContainer within sandbox \"0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Mar 17 18:19:51.736695 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2831866208.mount: Deactivated successfully. Mar 17 18:19:51.747922 env[1816]: time="2025-03-17T18:19:51.747856420Z" level=info msg="CreateContainer within sandbox \"0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b\"" Mar 17 18:19:51.750828 env[1816]: time="2025-03-17T18:19:51.749703840Z" level=info msg="StartContainer for \"44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b\"" Mar 17 18:19:51.789769 systemd[1]: Started cri-containerd-44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b.scope. Mar 17 18:19:51.833000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.833000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3265 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:51.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434653462616333373864613761333137623239643830633663316630 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.834000 audit: BPF prog-id=129 op=LOAD Mar 17 18:19:51.834000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=3265 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:51.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434653462616333373864613761333137623239643830633663316630 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.836000 audit: BPF prog-id=130 op=LOAD Mar 17 18:19:51.836000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=3265 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:51.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434653462616333373864613761333137623239643830633663316630 Mar 17 18:19:51.838000 audit: BPF prog-id=130 op=UNLOAD Mar 17 18:19:51.838000 audit: BPF prog-id=129 op=UNLOAD Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:51.838000 audit: BPF prog-id=131 op=LOAD Mar 17 18:19:51.838000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=3265 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:51.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434653462616333373864613761333137623239643830633663316630 Mar 17 18:19:51.867020 env[1816]: time="2025-03-17T18:19:51.866130649Z" level=info msg="StartContainer for \"44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b\" returns successfully" Mar 17 18:19:51.896730 systemd[1]: cri-containerd-44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b.scope: Deactivated successfully. Mar 17 18:19:51.900000 audit: BPF prog-id=131 op=UNLOAD Mar 17 18:19:52.061465 env[1816]: time="2025-03-17T18:19:52.061393046Z" level=info msg="shim disconnected" id=44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b Mar 17 18:19:52.061774 env[1816]: time="2025-03-17T18:19:52.061466562Z" level=warning msg="cleaning up after shim disconnected" id=44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b namespace=k8s.io Mar 17 18:19:52.061774 env[1816]: time="2025-03-17T18:19:52.061489115Z" level=info msg="cleaning up dead shim" Mar 17 18:19:52.078991 env[1816]: time="2025-03-17T18:19:52.078781938Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:19:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3388 runtime=io.containerd.runc.v2\n" Mar 17 18:19:52.289943 kubelet[2815]: E0317 18:19:52.289555 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:19:52.399299 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-44e4bac378da7a317b29d80c6c1f0384566fb4062172796931c370550335d19b-rootfs.mount: Deactivated successfully. Mar 17 18:19:54.290282 kubelet[2815]: E0317 18:19:54.290179 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:19:54.646917 env[1816]: time="2025-03-17T18:19:54.646848774Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:54.649309 env[1816]: time="2025-03-17T18:19:54.649248331Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d1fc316829ae1650b0b1629b54232520f297e7c3b1444eecd290ae088902a28,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:54.651647 env[1816]: time="2025-03-17T18:19:54.651594116Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:54.653830 env[1816]: time="2025-03-17T18:19:54.653782438Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:768a194e1115c73bcbf35edb7afd18a63e16e08d940c79993565b6a3cca2da7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:19:54.654958 env[1816]: time="2025-03-17T18:19:54.654910585Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.29.1\" returns image reference \"sha256:1d1fc316829ae1650b0b1629b54232520f297e7c3b1444eecd290ae088902a28\"" Mar 17 18:19:54.658041 env[1816]: time="2025-03-17T18:19:54.657989476Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\"" Mar 17 18:19:54.717805 env[1816]: time="2025-03-17T18:19:54.717726222Z" level=info msg="CreateContainer within sandbox \"526d74563228018cfc53d87f53fe5c178d5c70410093b20e723effff7e8e3663\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Mar 17 18:19:54.739979 env[1816]: time="2025-03-17T18:19:54.739890323Z" level=info msg="CreateContainer within sandbox \"526d74563228018cfc53d87f53fe5c178d5c70410093b20e723effff7e8e3663\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"c4ecc5d93487c9fd114e43a9c42e5afc449d834b08e74b9fb5fdd25ee9bf0d85\"" Mar 17 18:19:54.741108 env[1816]: time="2025-03-17T18:19:54.741050060Z" level=info msg="StartContainer for \"c4ecc5d93487c9fd114e43a9c42e5afc449d834b08e74b9fb5fdd25ee9bf0d85\"" Mar 17 18:19:54.810463 systemd[1]: Started cri-containerd-c4ecc5d93487c9fd114e43a9c42e5afc449d834b08e74b9fb5fdd25ee9bf0d85.scope. Mar 17 18:19:54.912278 kernel: kauditd_printk_skb: 160 callbacks suppressed Mar 17 18:19:54.912430 kernel: audit: type=1400 audit(1742235594.908:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.936174 kernel: audit: type=1400 audit(1742235594.908:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.936335 kernel: audit: type=1400 audit(1742235594.908:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.946582 kernel: audit: type=1400 audit(1742235594.908:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.969305 kernel: audit: type=1400 audit(1742235594.908:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.969439 kernel: audit: type=1400 audit(1742235594.908:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.976654 kernel: audit: type=1400 audit(1742235594.908:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.984048 kernel: audit: type=1400 audit(1742235594.908:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.991855 kernel: audit: type=1400 audit(1742235594.908:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:55.004052 env[1816]: time="2025-03-17T18:19:55.003995891Z" level=info msg="StartContainer for \"c4ecc5d93487c9fd114e43a9c42e5afc449d834b08e74b9fb5fdd25ee9bf0d85\" returns successfully" Mar 17 18:19:54.910000 audit: BPF prog-id=132 op=LOAD Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:55.005363 kernel: audit: type=1400 audit(1742235594.910:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3297 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:54.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334656363356439333438376339666431313465343361396334326535 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3297 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:54.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334656363356439333438376339666431313465343361396334326535 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.920000 audit: BPF prog-id=133 op=LOAD Mar 17 18:19:54.920000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3297 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:54.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334656363356439333438376339666431313465343361396334326535 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.924000 audit: BPF prog-id=134 op=LOAD Mar 17 18:19:54.924000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3297 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:54.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334656363356439333438376339666431313465343361396334326535 Mar 17 18:19:54.924000 audit: BPF prog-id=134 op=UNLOAD Mar 17 18:19:54.925000 audit: BPF prog-id=133 op=UNLOAD Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:19:54.925000 audit: BPF prog-id=135 op=LOAD Mar 17 18:19:54.925000 audit[3415]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3297 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:19:54.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334656363356439333438376339666431313465343361396334326535 Mar 17 18:19:56.290149 kubelet[2815]: E0317 18:19:56.290093 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:19:56.448791 kubelet[2815]: I0317 18:19:56.448739 2815 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:19:58.290363 kubelet[2815]: E0317 18:19:58.290283 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:20:00.291073 kubelet[2815]: E0317 18:20:00.289769 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:20:01.079472 env[1816]: time="2025-03-17T18:20:01.079387710Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:01.082248 env[1816]: time="2025-03-17T18:20:01.082164068Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e5ca62af4ff61b88f55fe4e0d7723151103d3f6a470fd4ebb311a2de27a9597f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:01.085112 env[1816]: time="2025-03-17T18:20:01.085027156Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:01.087524 env[1816]: time="2025-03-17T18:20:01.087462051Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21e759d51c90dfb34fc1397dc180dd3a3fb564c2b0580d2f61ffe108f2a3c94b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:01.088857 env[1816]: time="2025-03-17T18:20:01.088811763Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.29.1\" returns image reference \"sha256:e5ca62af4ff61b88f55fe4e0d7723151103d3f6a470fd4ebb311a2de27a9597f\"" Mar 17 18:20:01.096342 env[1816]: time="2025-03-17T18:20:01.095782701Z" level=info msg="CreateContainer within sandbox \"0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Mar 17 18:20:01.119960 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4183080622.mount: Deactivated successfully. Mar 17 18:20:01.124347 env[1816]: time="2025-03-17T18:20:01.124269233Z" level=info msg="CreateContainer within sandbox \"0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa\"" Mar 17 18:20:01.128314 env[1816]: time="2025-03-17T18:20:01.128263483Z" level=info msg="StartContainer for \"4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa\"" Mar 17 18:20:01.177771 systemd[1]: run-containerd-runc-k8s.io-4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa-runc.XM9JZB.mount: Deactivated successfully. Mar 17 18:20:01.186078 systemd[1]: Started cri-containerd-4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa.scope. Mar 17 18:20:01.236019 kernel: kauditd_printk_skb: 47 callbacks suppressed Mar 17 18:20:01.236186 kernel: audit: type=1400 audit(1742235601.225:1003): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3265 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:01.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438373161313533383036646437643735613964636161393538623830 Mar 17 18:20:01.258297 kernel: audit: type=1300 audit(1742235601.225:1003): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3265 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:01.258436 kernel: audit: type=1327 audit(1742235601.225:1003): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438373161313533383036646437643735613964636161393538623830 Mar 17 18:20:01.267921 kernel: audit: type=1400 audit(1742235601.225:1004): avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.275697 kernel: audit: type=1400 audit(1742235601.225:1004): avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.282911 kernel: audit: type=1400 audit(1742235601.225:1004): avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.291277 kernel: audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.307230 kernel: audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.307371 kernel: audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.315309 kernel: audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.225000 audit: BPF prog-id=136 op=LOAD Mar 17 18:20:01.225000 audit[3452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3265 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:01.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438373161313533383036646437643735613964636161393538623830 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.316617 env[1816]: time="2025-03-17T18:20:01.316517569Z" level=info msg="StartContainer for \"4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa\" returns successfully" Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.228000 audit: BPF prog-id=137 op=LOAD Mar 17 18:20:01.228000 audit[3452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3265 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:01.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438373161313533383036646437643735613964636161393538623830 Mar 17 18:20:01.235000 audit: BPF prog-id=137 op=UNLOAD Mar 17 18:20:01.235000 audit: BPF prog-id=136 op=UNLOAD Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit[3452]: AVC avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:01.235000 audit: BPF prog-id=138 op=LOAD Mar 17 18:20:01.235000 audit[3452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3265 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:01.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438373161313533383036646437643735613964636161393538623830 Mar 17 18:20:01.510487 kubelet[2815]: I0317 18:20:01.510108 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-786cb64d79-wk2pw" podStartSLOduration=9.312036232 podStartE2EDuration="14.510082396s" podCreationTimestamp="2025-03-17 18:19:47 +0000 UTC" firstStartedPulling="2025-03-17 18:19:49.459626131 +0000 UTC m=+20.453626498" lastFinishedPulling="2025-03-17 18:19:54.657672307 +0000 UTC m=+25.651672662" observedRunningTime="2025-03-17 18:19:55.467314702 +0000 UTC m=+26.461315105" watchObservedRunningTime="2025-03-17 18:20:01.510082396 +0000 UTC m=+32.504082787" Mar 17 18:20:02.289583 kubelet[2815]: E0317 18:20:02.289525 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:20:02.414101 env[1816]: time="2025-03-17T18:20:02.414012175Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Mar 17 18:20:02.422273 systemd[1]: cri-containerd-4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa.scope: Deactivated successfully. Mar 17 18:20:02.422731 systemd[1]: cri-containerd-4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa.scope: Consumed 1.014s CPU time. Mar 17 18:20:02.423000 audit: BPF prog-id=138 op=UNLOAD Mar 17 18:20:02.462021 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa-rootfs.mount: Deactivated successfully. Mar 17 18:20:02.523716 kubelet[2815]: I0317 18:20:02.523680 2815 kubelet_node_status.go:502] "Fast updating node status as it just became ready" Mar 17 18:20:02.593218 systemd[1]: Created slice kubepods-burstable-pod2fe2a44e_7dcf_4985_b48e_f96f72114148.slice. Mar 17 18:20:02.625018 systemd[1]: Created slice kubepods-burstable-pod1a5e122d_9ee1_403e_b9a1_8c1f1fc711b5.slice. Mar 17 18:20:02.648832 systemd[1]: Created slice kubepods-besteffort-pod3bceefdc_d795_4cdf_8750_ffa14ad2fd30.slice. Mar 17 18:20:02.678568 systemd[1]: Created slice kubepods-besteffort-pod794a54a9_08ea_4ce8_9b23_31b1a7c0bb2b.slice. Mar 17 18:20:02.696774 systemd[1]: Created slice kubepods-besteffort-podc75faff5_3cef_46ff_ba10_66ea433009f1.slice. Mar 17 18:20:02.704499 kubelet[2815]: I0317 18:20:02.704450 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-twslx\" (UniqueName: \"kubernetes.io/projected/1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5-kube-api-access-twslx\") pod \"coredns-668d6bf9bc-xg2dg\" (UID: \"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5\") " pod="kube-system/coredns-668d6bf9bc-xg2dg" Mar 17 18:20:02.704838 kubelet[2815]: I0317 18:20:02.704807 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3bceefdc-d795-4cdf-8750-ffa14ad2fd30-calico-apiserver-certs\") pod \"calico-apiserver-58f8c8bbc6-s9n4g\" (UID: \"3bceefdc-d795-4cdf-8750-ffa14ad2fd30\") " pod="calico-apiserver/calico-apiserver-58f8c8bbc6-s9n4g" Mar 17 18:20:02.705015 kubelet[2815]: I0317 18:20:02.704986 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b-calico-apiserver-certs\") pod \"calico-apiserver-58f8c8bbc6-5w4cr\" (UID: \"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b\") " pod="calico-apiserver/calico-apiserver-58f8c8bbc6-5w4cr" Mar 17 18:20:02.705188 kubelet[2815]: I0317 18:20:02.705159 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c75faff5-3cef-46ff-ba10-66ea433009f1-tigera-ca-bundle\") pod \"calico-kube-controllers-67cf458567-jvl9v\" (UID: \"c75faff5-3cef-46ff-ba10-66ea433009f1\") " pod="calico-system/calico-kube-controllers-67cf458567-jvl9v" Mar 17 18:20:02.705391 kubelet[2815]: I0317 18:20:02.705361 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-px925\" (UniqueName: \"kubernetes.io/projected/794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b-kube-api-access-px925\") pod \"calico-apiserver-58f8c8bbc6-5w4cr\" (UID: \"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b\") " pod="calico-apiserver/calico-apiserver-58f8c8bbc6-5w4cr" Mar 17 18:20:02.705571 kubelet[2815]: I0317 18:20:02.705542 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nznwz\" (UniqueName: \"kubernetes.io/projected/2fe2a44e-7dcf-4985-b48e-f96f72114148-kube-api-access-nznwz\") pod \"coredns-668d6bf9bc-p6zsv\" (UID: \"2fe2a44e-7dcf-4985-b48e-f96f72114148\") " pod="kube-system/coredns-668d6bf9bc-p6zsv" Mar 17 18:20:02.705732 kubelet[2815]: I0317 18:20:02.705701 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5-config-volume\") pod \"coredns-668d6bf9bc-xg2dg\" (UID: \"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5\") " pod="kube-system/coredns-668d6bf9bc-xg2dg" Mar 17 18:20:02.705907 kubelet[2815]: I0317 18:20:02.705881 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/2fe2a44e-7dcf-4985-b48e-f96f72114148-config-volume\") pod \"coredns-668d6bf9bc-p6zsv\" (UID: \"2fe2a44e-7dcf-4985-b48e-f96f72114148\") " pod="kube-system/coredns-668d6bf9bc-p6zsv" Mar 17 18:20:02.706067 kubelet[2815]: I0317 18:20:02.706040 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7t5b7\" (UniqueName: \"kubernetes.io/projected/c75faff5-3cef-46ff-ba10-66ea433009f1-kube-api-access-7t5b7\") pod \"calico-kube-controllers-67cf458567-jvl9v\" (UID: \"c75faff5-3cef-46ff-ba10-66ea433009f1\") " pod="calico-system/calico-kube-controllers-67cf458567-jvl9v" Mar 17 18:20:02.706285 kubelet[2815]: I0317 18:20:02.706256 2815 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pg6r6\" (UniqueName: \"kubernetes.io/projected/3bceefdc-d795-4cdf-8750-ffa14ad2fd30-kube-api-access-pg6r6\") pod \"calico-apiserver-58f8c8bbc6-s9n4g\" (UID: \"3bceefdc-d795-4cdf-8750-ffa14ad2fd30\") " pod="calico-apiserver/calico-apiserver-58f8c8bbc6-s9n4g" Mar 17 18:20:02.911318 env[1816]: time="2025-03-17T18:20:02.910479305Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-p6zsv,Uid:2fe2a44e-7dcf-4985-b48e-f96f72114148,Namespace:kube-system,Attempt:0,}" Mar 17 18:20:02.948106 env[1816]: time="2025-03-17T18:20:02.947752527Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xg2dg,Uid:1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5,Namespace:kube-system,Attempt:0,}" Mar 17 18:20:02.969509 env[1816]: time="2025-03-17T18:20:02.969446994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-s9n4g,Uid:3bceefdc-d795-4cdf-8750-ffa14ad2fd30,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:20:02.989411 env[1816]: time="2025-03-17T18:20:02.989007984Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-5w4cr,Uid:794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b,Namespace:calico-apiserver,Attempt:0,}" Mar 17 18:20:03.015179 env[1816]: time="2025-03-17T18:20:03.015074155Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67cf458567-jvl9v,Uid:c75faff5-3cef-46ff-ba10-66ea433009f1,Namespace:calico-system,Attempt:0,}" Mar 17 18:20:03.251309 env[1816]: time="2025-03-17T18:20:03.251127388Z" level=info msg="shim disconnected" id=4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa Mar 17 18:20:03.251309 env[1816]: time="2025-03-17T18:20:03.251200397Z" level=warning msg="cleaning up after shim disconnected" id=4871a153806dd7d75a9dcaa958b80f07959518aa909b70000915872880a1d8aa namespace=k8s.io Mar 17 18:20:03.251309 env[1816]: time="2025-03-17T18:20:03.251243017Z" level=info msg="cleaning up dead shim" Mar 17 18:20:03.280445 env[1816]: time="2025-03-17T18:20:03.280385824Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:20:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3500 runtime=io.containerd.runc.v2\n" Mar 17 18:20:03.501698 env[1816]: time="2025-03-17T18:20:03.501435107Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\"" Mar 17 18:20:03.693233 env[1816]: time="2025-03-17T18:20:03.693119412Z" level=error msg="Failed to destroy network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.697340 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281-shm.mount: Deactivated successfully. Mar 17 18:20:03.700351 env[1816]: time="2025-03-17T18:20:03.700263488Z" level=error msg="encountered an error cleaning up failed sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.700541 env[1816]: time="2025-03-17T18:20:03.700373632Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-5w4cr,Uid:794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.701802 kubelet[2815]: E0317 18:20:03.700869 2815 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.701802 kubelet[2815]: E0317 18:20:03.701015 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-5w4cr" Mar 17 18:20:03.701802 kubelet[2815]: E0317 18:20:03.701080 2815 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-5w4cr" Mar 17 18:20:03.704420 kubelet[2815]: E0317 18:20:03.701200 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-58f8c8bbc6-5w4cr_calico-apiserver(794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-58f8c8bbc6-5w4cr_calico-apiserver(794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-5w4cr" podUID="794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b" Mar 17 18:20:03.705043 env[1816]: time="2025-03-17T18:20:03.704976296Z" level=error msg="Failed to destroy network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.713734 env[1816]: time="2025-03-17T18:20:03.713393347Z" level=error msg="encountered an error cleaning up failed sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.714473 env[1816]: time="2025-03-17T18:20:03.714269013Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xg2dg,Uid:1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.715944 env[1816]: time="2025-03-17T18:20:03.715854920Z" level=error msg="Failed to destroy network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.716191 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c-shm.mount: Deactivated successfully. Mar 17 18:20:03.721863 kubelet[2815]: E0317 18:20:03.719496 2815 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.721863 kubelet[2815]: E0317 18:20:03.719582 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-xg2dg" Mar 17 18:20:03.721863 kubelet[2815]: E0317 18:20:03.719618 2815 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-xg2dg" Mar 17 18:20:03.722280 kubelet[2815]: E0317 18:20:03.719687 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-xg2dg_kube-system(1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-xg2dg_kube-system(1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-xg2dg" podUID="1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5" Mar 17 18:20:03.726003 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238-shm.mount: Deactivated successfully. Mar 17 18:20:03.726929 env[1816]: time="2025-03-17T18:20:03.726856938Z" level=error msg="encountered an error cleaning up failed sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.727158 env[1816]: time="2025-03-17T18:20:03.727106475Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-p6zsv,Uid:2fe2a44e-7dcf-4985-b48e-f96f72114148,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.730646 kubelet[2815]: E0317 18:20:03.728311 2815 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.730646 kubelet[2815]: E0317 18:20:03.728423 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-p6zsv" Mar 17 18:20:03.730646 kubelet[2815]: E0317 18:20:03.728663 2815 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-p6zsv" Mar 17 18:20:03.732375 kubelet[2815]: E0317 18:20:03.728778 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-p6zsv_kube-system(2fe2a44e-7dcf-4985-b48e-f96f72114148)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-p6zsv_kube-system(2fe2a44e-7dcf-4985-b48e-f96f72114148)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-p6zsv" podUID="2fe2a44e-7dcf-4985-b48e-f96f72114148" Mar 17 18:20:03.734769 env[1816]: time="2025-03-17T18:20:03.734679557Z" level=error msg="Failed to destroy network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.738914 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc-shm.mount: Deactivated successfully. Mar 17 18:20:03.742032 env[1816]: time="2025-03-17T18:20:03.741960386Z" level=error msg="encountered an error cleaning up failed sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.742368 env[1816]: time="2025-03-17T18:20:03.742306204Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67cf458567-jvl9v,Uid:c75faff5-3cef-46ff-ba10-66ea433009f1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.742931 kubelet[2815]: E0317 18:20:03.742873 2815 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.743077 kubelet[2815]: E0317 18:20:03.742969 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-67cf458567-jvl9v" Mar 17 18:20:03.743077 kubelet[2815]: E0317 18:20:03.743006 2815 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-67cf458567-jvl9v" Mar 17 18:20:03.743761 kubelet[2815]: E0317 18:20:03.743092 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-67cf458567-jvl9v_calico-system(c75faff5-3cef-46ff-ba10-66ea433009f1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-67cf458567-jvl9v_calico-system(c75faff5-3cef-46ff-ba10-66ea433009f1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-67cf458567-jvl9v" podUID="c75faff5-3cef-46ff-ba10-66ea433009f1" Mar 17 18:20:03.749566 env[1816]: time="2025-03-17T18:20:03.749488987Z" level=error msg="Failed to destroy network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.750498 env[1816]: time="2025-03-17T18:20:03.750440555Z" level=error msg="encountered an error cleaning up failed sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.750732 env[1816]: time="2025-03-17T18:20:03.750684463Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-s9n4g,Uid:3bceefdc-d795-4cdf-8750-ffa14ad2fd30,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.752098 kubelet[2815]: E0317 18:20:03.751661 2815 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:03.752098 kubelet[2815]: E0317 18:20:03.751838 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-s9n4g" Mar 17 18:20:03.753414 kubelet[2815]: E0317 18:20:03.751937 2815 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-s9n4g" Mar 17 18:20:03.753414 kubelet[2815]: E0317 18:20:03.752728 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-58f8c8bbc6-s9n4g_calico-apiserver(3bceefdc-d795-4cdf-8750-ffa14ad2fd30)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-58f8c8bbc6-s9n4g_calico-apiserver(3bceefdc-d795-4cdf-8750-ffa14ad2fd30)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-s9n4g" podUID="3bceefdc-d795-4cdf-8750-ffa14ad2fd30" Mar 17 18:20:04.299698 systemd[1]: Created slice kubepods-besteffort-pod75dff536_0e33_4ad9_9dd6_831e7b94f681.slice. Mar 17 18:20:04.305453 env[1816]: time="2025-03-17T18:20:04.305377907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2l2mt,Uid:75dff536-0e33-4ad9-9dd6-831e7b94f681,Namespace:calico-system,Attempt:0,}" Mar 17 18:20:04.438256 env[1816]: time="2025-03-17T18:20:04.438134168Z" level=error msg="Failed to destroy network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.439003 env[1816]: time="2025-03-17T18:20:04.438914775Z" level=error msg="encountered an error cleaning up failed sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.439408 env[1816]: time="2025-03-17T18:20:04.439034856Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2l2mt,Uid:75dff536-0e33-4ad9-9dd6-831e7b94f681,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.439533 kubelet[2815]: E0317 18:20:04.439467 2815 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.439636 kubelet[2815]: E0317 18:20:04.439571 2815 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2l2mt" Mar 17 18:20:04.439722 kubelet[2815]: E0317 18:20:04.439614 2815 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2l2mt" Mar 17 18:20:04.439879 kubelet[2815]: E0317 18:20:04.439739 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-2l2mt_calico-system(75dff536-0e33-4ad9-9dd6-831e7b94f681)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-2l2mt_calico-system(75dff536-0e33-4ad9-9dd6-831e7b94f681)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:20:04.463859 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9-shm.mount: Deactivated successfully. Mar 17 18:20:04.494246 kubelet[2815]: I0317 18:20:04.493944 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:04.496988 env[1816]: time="2025-03-17T18:20:04.495657223Z" level=info msg="StopPodSandbox for \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\"" Mar 17 18:20:04.502366 kubelet[2815]: I0317 18:20:04.500600 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:04.504554 env[1816]: time="2025-03-17T18:20:04.504495454Z" level=info msg="StopPodSandbox for \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\"" Mar 17 18:20:04.508944 kubelet[2815]: I0317 18:20:04.507162 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:04.509130 env[1816]: time="2025-03-17T18:20:04.508802577Z" level=info msg="StopPodSandbox for \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\"" Mar 17 18:20:04.514264 kubelet[2815]: I0317 18:20:04.513489 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:04.514789 env[1816]: time="2025-03-17T18:20:04.514735702Z" level=info msg="StopPodSandbox for \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\"" Mar 17 18:20:04.523258 kubelet[2815]: I0317 18:20:04.522660 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:04.526077 env[1816]: time="2025-03-17T18:20:04.525873086Z" level=info msg="StopPodSandbox for \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\"" Mar 17 18:20:04.532735 kubelet[2815]: I0317 18:20:04.531000 2815 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:04.532896 env[1816]: time="2025-03-17T18:20:04.532501423Z" level=info msg="StopPodSandbox for \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\"" Mar 17 18:20:04.721083 env[1816]: time="2025-03-17T18:20:04.721003966Z" level=error msg="StopPodSandbox for \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\" failed" error="failed to destroy network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.721981 kubelet[2815]: E0317 18:20:04.721907 2815 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:04.722600 kubelet[2815]: E0317 18:20:04.722035 2815 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc"} Mar 17 18:20:04.722600 kubelet[2815]: E0317 18:20:04.722179 2815 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c75faff5-3cef-46ff-ba10-66ea433009f1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:20:04.722600 kubelet[2815]: E0317 18:20:04.722253 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c75faff5-3cef-46ff-ba10-66ea433009f1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-67cf458567-jvl9v" podUID="c75faff5-3cef-46ff-ba10-66ea433009f1" Mar 17 18:20:04.728453 env[1816]: time="2025-03-17T18:20:04.728355132Z" level=error msg="StopPodSandbox for \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\" failed" error="failed to destroy network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.729128 kubelet[2815]: E0317 18:20:04.728874 2815 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:04.729128 kubelet[2815]: E0317 18:20:04.728968 2815 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238"} Mar 17 18:20:04.729128 kubelet[2815]: E0317 18:20:04.729029 2815 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2fe2a44e-7dcf-4985-b48e-f96f72114148\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:20:04.729128 kubelet[2815]: E0317 18:20:04.729075 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2fe2a44e-7dcf-4985-b48e-f96f72114148\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-p6zsv" podUID="2fe2a44e-7dcf-4985-b48e-f96f72114148" Mar 17 18:20:04.740049 env[1816]: time="2025-03-17T18:20:04.739949233Z" level=error msg="StopPodSandbox for \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\" failed" error="failed to destroy network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.740502 kubelet[2815]: E0317 18:20:04.740423 2815 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:04.740620 kubelet[2815]: E0317 18:20:04.740516 2815 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb"} Mar 17 18:20:04.740620 kubelet[2815]: E0317 18:20:04.740597 2815 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"75dff536-0e33-4ad9-9dd6-831e7b94f681\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:20:04.740799 kubelet[2815]: E0317 18:20:04.740668 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"75dff536-0e33-4ad9-9dd6-831e7b94f681\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2l2mt" podUID="75dff536-0e33-4ad9-9dd6-831e7b94f681" Mar 17 18:20:04.744849 env[1816]: time="2025-03-17T18:20:04.744773517Z" level=error msg="StopPodSandbox for \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\" failed" error="failed to destroy network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.745509 kubelet[2815]: E0317 18:20:04.745407 2815 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:04.745734 kubelet[2815]: E0317 18:20:04.745544 2815 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c"} Mar 17 18:20:04.745734 kubelet[2815]: E0317 18:20:04.745607 2815 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:20:04.745734 kubelet[2815]: E0317 18:20:04.745685 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-xg2dg" podUID="1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5" Mar 17 18:20:04.758861 env[1816]: time="2025-03-17T18:20:04.758785281Z" level=error msg="StopPodSandbox for \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\" failed" error="failed to destroy network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.759649 kubelet[2815]: E0317 18:20:04.759396 2815 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:04.759649 kubelet[2815]: E0317 18:20:04.759473 2815 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9"} Mar 17 18:20:04.759649 kubelet[2815]: E0317 18:20:04.759537 2815 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3bceefdc-d795-4cdf-8750-ffa14ad2fd30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:20:04.759649 kubelet[2815]: E0317 18:20:04.759583 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3bceefdc-d795-4cdf-8750-ffa14ad2fd30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-s9n4g" podUID="3bceefdc-d795-4cdf-8750-ffa14ad2fd30" Mar 17 18:20:04.761156 env[1816]: time="2025-03-17T18:20:04.761073572Z" level=error msg="StopPodSandbox for \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\" failed" error="failed to destroy network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Mar 17 18:20:04.761921 kubelet[2815]: E0317 18:20:04.761702 2815 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:04.761921 kubelet[2815]: E0317 18:20:04.761769 2815 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281"} Mar 17 18:20:04.761921 kubelet[2815]: E0317 18:20:04.761823 2815 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Mar 17 18:20:04.761921 kubelet[2815]: E0317 18:20:04.761870 2815 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-5w4cr" podUID="794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b" Mar 17 18:20:11.739486 kubelet[2815]: I0317 18:20:11.739371 2815 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:20:12.013000 audit[3821]: NETFILTER_CFG table=filter:97 family=2 entries=17 op=nft_register_rule pid=3821 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:12.016838 kernel: kauditd_printk_skb: 34 callbacks suppressed Mar 17 18:20:12.016983 kernel: audit: type=1325 audit(1742235612.013:1010): table=filter:97 family=2 entries=17 op=nft_register_rule pid=3821 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:12.013000 audit[3821]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffed7e1890 a2=0 a3=1 items=0 ppid=2993 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:12.035763 kernel: audit: type=1300 audit(1742235612.013:1010): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffed7e1890 a2=0 a3=1 items=0 ppid=2993 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:12.035930 kernel: audit: type=1327 audit(1742235612.013:1010): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:12.013000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:12.041271 kernel: audit: type=1325 audit(1742235612.039:1011): table=nat:98 family=2 entries=19 op=nft_register_chain pid=3821 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:12.039000 audit[3821]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=3821 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:12.039000 audit[3821]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffed7e1890 a2=0 a3=1 items=0 ppid=2993 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:12.058703 kernel: audit: type=1300 audit(1742235612.039:1011): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffed7e1890 a2=0 a3=1 items=0 ppid=2993 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:12.039000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:12.066380 kernel: audit: type=1327 audit(1742235612.039:1011): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:13.554703 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2420597374.mount: Deactivated successfully. Mar 17 18:20:13.637324 env[1816]: time="2025-03-17T18:20:13.637258316Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:13.642060 env[1816]: time="2025-03-17T18:20:13.642001392Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:680b8c280812d12c035ca9f0deedea7c761afe0f1cc65109ea2f96bf63801758,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:13.645599 env[1816]: time="2025-03-17T18:20:13.645546412Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:13.648744 env[1816]: time="2025-03-17T18:20:13.648687195Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:99c3917516efe1f807a0cfdf2d14b628b7c5cc6bd8a9ee5a253154f31756bea1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:13.650409 env[1816]: time="2025-03-17T18:20:13.650348681Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.29.1\" returns image reference \"sha256:680b8c280812d12c035ca9f0deedea7c761afe0f1cc65109ea2f96bf63801758\"" Mar 17 18:20:13.685078 env[1816]: time="2025-03-17T18:20:13.684850570Z" level=info msg="CreateContainer within sandbox \"0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Mar 17 18:20:13.741770 env[1816]: time="2025-03-17T18:20:13.741698286Z" level=info msg="CreateContainer within sandbox \"0fb197436db74b1d115c4eeb7460845ee3e4129442c0b4603cc3b21db7fe428d\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"409508756daa3de07f164db526036e4ddf744e97bd905cef1c783bbd04a1f943\"" Mar 17 18:20:13.742762 env[1816]: time="2025-03-17T18:20:13.742706663Z" level=info msg="StartContainer for \"409508756daa3de07f164db526036e4ddf744e97bd905cef1c783bbd04a1f943\"" Mar 17 18:20:13.777201 systemd[1]: Started cri-containerd-409508756daa3de07f164db526036e4ddf744e97bd905cef1c783bbd04a1f943.scope. Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3265 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:13.854364 kernel: audit: type=1400 audit(1742235613.844:1012): avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393530383735366461613364653037663136346462353236303336 Mar 17 18:20:13.875770 kernel: audit: type=1300 audit(1742235613.844:1012): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3265 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:13.875919 kernel: audit: type=1327 audit(1742235613.844:1012): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393530383735366461613364653037663136346462353236303336 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.885289 kernel: audit: type=1400 audit(1742235613.844:1013): avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.844000 audit: BPF prog-id=139 op=LOAD Mar 17 18:20:13.844000 audit[3832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3265 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:13.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393530383735366461613364653037663136346462353236303336 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.852000 audit: BPF prog-id=140 op=LOAD Mar 17 18:20:13.852000 audit[3832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3265 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:13.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393530383735366461613364653037663136346462353236303336 Mar 17 18:20:13.852000 audit: BPF prog-id=140 op=UNLOAD Mar 17 18:20:13.853000 audit: BPF prog-id=139 op=UNLOAD Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit[3832]: AVC avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:13.853000 audit: BPF prog-id=141 op=LOAD Mar 17 18:20:13.853000 audit[3832]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3265 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:13.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393530383735366461613364653037663136346462353236303336 Mar 17 18:20:13.925814 env[1816]: time="2025-03-17T18:20:13.925748384Z" level=info msg="StartContainer for \"409508756daa3de07f164db526036e4ddf744e97bd905cef1c783bbd04a1f943\" returns successfully" Mar 17 18:20:14.071839 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Mar 17 18:20:14.072002 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Mar 17 18:20:14.611007 kubelet[2815]: I0317 18:20:14.610909 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-h9h2c" podStartSLOduration=3.289300074 podStartE2EDuration="27.610882873s" podCreationTimestamp="2025-03-17 18:19:47 +0000 UTC" firstStartedPulling="2025-03-17 18:19:49.331334821 +0000 UTC m=+20.325335188" lastFinishedPulling="2025-03-17 18:20:13.652917632 +0000 UTC m=+44.646917987" observedRunningTime="2025-03-17 18:20:14.610374533 +0000 UTC m=+45.604374936" watchObservedRunningTime="2025-03-17 18:20:14.610882873 +0000 UTC m=+45.604883360" Mar 17 18:20:14.622852 systemd[1]: run-containerd-runc-k8s.io-409508756daa3de07f164db526036e4ddf744e97bd905cef1c783bbd04a1f943-runc.2lPx4J.mount: Deactivated successfully. Mar 17 18:20:15.291037 env[1816]: time="2025-03-17T18:20:15.290957267Z" level=info msg="StopPodSandbox for \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\"" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.392 [INFO][3924] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.392 [INFO][3924] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" iface="eth0" netns="/var/run/netns/cni-a1839225-56ef-ef5e-4554-ab58ea9dbc65" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.393 [INFO][3924] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" iface="eth0" netns="/var/run/netns/cni-a1839225-56ef-ef5e-4554-ab58ea9dbc65" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.393 [INFO][3924] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" iface="eth0" netns="/var/run/netns/cni-a1839225-56ef-ef5e-4554-ab58ea9dbc65" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.394 [INFO][3924] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.394 [INFO][3924] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.441 [INFO][3931] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.441 [INFO][3931] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.441 [INFO][3931] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.454 [WARNING][3931] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.454 [INFO][3931] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.456 [INFO][3931] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:15.463852 env[1816]: 2025-03-17 18:20:15.461 [INFO][3924] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:15.470690 env[1816]: time="2025-03-17T18:20:15.469174706Z" level=info msg="TearDown network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\" successfully" Mar 17 18:20:15.470690 env[1816]: time="2025-03-17T18:20:15.469284631Z" level=info msg="StopPodSandbox for \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\" returns successfully" Mar 17 18:20:15.468281 systemd[1]: run-netns-cni\x2da1839225\x2d56ef\x2def5e\x2d4554\x2dab58ea9dbc65.mount: Deactivated successfully. Mar 17 18:20:15.471319 env[1816]: time="2025-03-17T18:20:15.471267559Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xg2dg,Uid:1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5,Namespace:kube-system,Attempt:1,}" Mar 17 18:20:15.622455 systemd[1]: run-containerd-runc-k8s.io-409508756daa3de07f164db526036e4ddf744e97bd905cef1c783bbd04a1f943-runc.YewNnW.mount: Deactivated successfully. Mar 17 18:20:15.794973 (udev-worker)[3865]: Network interface NamePolicy= disabled on kernel command line. Mar 17 18:20:15.807977 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:20:15.808143 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia3c925e4515: link becomes ready Mar 17 18:20:15.808621 systemd-networkd[1536]: calia3c925e4515: Link UP Mar 17 18:20:15.810290 systemd-networkd[1536]: calia3c925e4515: Gained carrier Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.537 [INFO][3938] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.585 [INFO][3938] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0 coredns-668d6bf9bc- kube-system 1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5 747 0 2025-03-17 18:19:33 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-97 coredns-668d6bf9bc-xg2dg eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calia3c925e4515 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.585 [INFO][3938] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.689 [INFO][3957] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" HandleID="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.710 [INFO][3957] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" HandleID="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002a0960), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-97", "pod":"coredns-668d6bf9bc-xg2dg", "timestamp":"2025-03-17 18:20:15.689142324 +0000 UTC"}, Hostname:"ip-172-31-25-97", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.710 [INFO][3957] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.710 [INFO][3957] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.710 [INFO][3957] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-97' Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.717 [INFO][3957] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.728 [INFO][3957] ipam/ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.738 [INFO][3957] ipam/ipam.go 489: Trying affinity for 192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.743 [INFO][3957] ipam/ipam.go 155: Attempting to load block cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.750 [INFO][3957] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.750 [INFO][3957] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.33.128/26 handle="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.753 [INFO][3957] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26 Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.765 [INFO][3957] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.33.128/26 handle="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.777 [INFO][3957] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.33.129/26] block=192.168.33.128/26 handle="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.777 [INFO][3957] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.33.129/26] handle="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" host="ip-172-31-25-97" Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.777 [INFO][3957] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:15.840341 env[1816]: 2025-03-17 18:20:15.778 [INFO][3957] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.33.129/26] IPv6=[] ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" HandleID="k8s-pod-network.4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.841928 env[1816]: 2025-03-17 18:20:15.781 [INFO][3938] cni-plugin/k8s.go 386: Populated endpoint ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5", ResourceVersion:"747", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"", Pod:"coredns-668d6bf9bc-xg2dg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3c925e4515", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:15.841928 env[1816]: 2025-03-17 18:20:15.781 [INFO][3938] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.33.129/32] ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.841928 env[1816]: 2025-03-17 18:20:15.781 [INFO][3938] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia3c925e4515 ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.841928 env[1816]: 2025-03-17 18:20:15.808 [INFO][3938] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.841928 env[1816]: 2025-03-17 18:20:15.810 [INFO][3938] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5", ResourceVersion:"747", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26", Pod:"coredns-668d6bf9bc-xg2dg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3c925e4515", MAC:"86:d2:df:c7:29:90", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:15.841928 env[1816]: 2025-03-17 18:20:15.836 [INFO][3938] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26" Namespace="kube-system" Pod="coredns-668d6bf9bc-xg2dg" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:15.879520 env[1816]: time="2025-03-17T18:20:15.878980976Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:20:15.879520 env[1816]: time="2025-03-17T18:20:15.879062613Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:20:15.879520 env[1816]: time="2025-03-17T18:20:15.879095078Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:20:15.882145 env[1816]: time="2025-03-17T18:20:15.881970682Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26 pid=4031 runtime=io.containerd.runc.v2 Mar 17 18:20:15.944582 systemd[1]: Started cri-containerd-4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26.scope. Mar 17 18:20:15.970000 audit[4048]: AVC avc: denied { write } for pid=4048 comm="tee" name="fd" dev="proc" ino=21223 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:20:15.970000 audit[4048]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc38c0a1a a2=241 a3=1b6 items=1 ppid=3984 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:15.976000 audit[4066]: AVC avc: denied { write } for pid=4066 comm="tee" name="fd" dev="proc" ino=21227 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:20:15.970000 audit: CWD cwd="/etc/service/enabled/confd/log" Mar 17 18:20:15.970000 audit: PATH item=0 name="/dev/fd/63" inode=21781 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:20:15.970000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:20:15.976000 audit[4066]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe89aca1a a2=241 a3=1b6 items=1 ppid=3988 pid=4066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:15.976000 audit: CWD cwd="/etc/service/enabled/bird6/log" Mar 17 18:20:15.976000 audit: PATH item=0 name="/dev/fd/63" inode=21220 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:20:15.976000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.988000 audit: BPF prog-id=142 op=LOAD Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4031 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:15.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430343330303962363834323535333535663232656635363432336334 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4031 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:15.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430343330303962363834323535333535663232656635363432336334 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.989000 audit: BPF prog-id=143 op=LOAD Mar 17 18:20:15.989000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4031 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:15.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430343330303962363834323535333535663232656635363432336334 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit: BPF prog-id=144 op=LOAD Mar 17 18:20:15.990000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4031 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:15.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430343330303962363834323535333535663232656635363432336334 Mar 17 18:20:15.990000 audit: BPF prog-id=144 op=UNLOAD Mar 17 18:20:15.990000 audit: BPF prog-id=143 op=UNLOAD Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:15.990000 audit: BPF prog-id=145 op=LOAD Mar 17 18:20:15.990000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4031 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:15.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430343330303962363834323535333535663232656635363432336334 Mar 17 18:20:16.026000 audit[4061]: AVC avc: denied { write } for pid=4061 comm="tee" name="fd" dev="proc" ino=21888 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:20:16.026000 audit[4061]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff5825a1b a2=241 a3=1b6 items=1 ppid=3985 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.026000 audit: CWD cwd="/etc/service/enabled/bird/log" Mar 17 18:20:16.026000 audit: PATH item=0 name="/dev/fd/63" inode=21204 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:20:16.026000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:20:16.046378 env[1816]: time="2025-03-17T18:20:16.046304484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-xg2dg,Uid:1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5,Namespace:kube-system,Attempt:1,} returns sandbox id \"4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26\"" Mar 17 18:20:16.056226 env[1816]: time="2025-03-17T18:20:16.056124081Z" level=info msg="CreateContainer within sandbox \"4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:20:16.089701 env[1816]: time="2025-03-17T18:20:16.089617362Z" level=info msg="CreateContainer within sandbox \"4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"bccc2aa2ce66fa521addb8963a499b6324106fff17a0e23c3c90e1bd2e9ab973\"" Mar 17 18:20:16.090977 env[1816]: time="2025-03-17T18:20:16.090912172Z" level=info msg="StartContainer for \"bccc2aa2ce66fa521addb8963a499b6324106fff17a0e23c3c90e1bd2e9ab973\"" Mar 17 18:20:16.110000 audit[4107]: AVC avc: denied { write } for pid=4107 comm="tee" name="fd" dev="proc" ino=21243 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:20:16.110000 audit[4107]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd6eeda1c a2=241 a3=1b6 items=1 ppid=4000 pid=4107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.110000 audit: CWD cwd="/etc/service/enabled/cni/log" Mar 17 18:20:16.110000 audit: PATH item=0 name="/dev/fd/63" inode=21236 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:20:16.110000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:20:16.126000 audit[4110]: AVC avc: denied { write } for pid=4110 comm="tee" name="fd" dev="proc" ino=21935 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:20:16.137278 systemd[1]: Started cri-containerd-bccc2aa2ce66fa521addb8963a499b6324106fff17a0e23c3c90e1bd2e9ab973.scope. Mar 17 18:20:16.169000 audit[4084]: AVC avc: denied { write } for pid=4084 comm="tee" name="fd" dev="proc" ino=21944 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:20:16.169000 audit[4084]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff15bda1a a2=241 a3=1b6 items=1 ppid=3990 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.169000 audit: CWD cwd="/etc/service/enabled/felix/log" Mar 17 18:20:16.169000 audit: PATH item=0 name="/dev/fd/63" inode=21848 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:20:16.169000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:20:16.126000 audit[4110]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd74caa0a a2=241 a3=1b6 items=1 ppid=3987 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.126000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Mar 17 18:20:16.126000 audit: PATH item=0 name="/dev/fd/63" inode=21894 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:20:16.126000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.203000 audit: BPF prog-id=146 op=LOAD Mar 17 18:20:16.204000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.204000 audit[4124]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4031 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636332616132636536366661353231616464623839363361343939 Mar 17 18:20:16.204000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.204000 audit[4124]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4031 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636332616132636536366661353231616464623839363361343939 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit: BPF prog-id=147 op=LOAD Mar 17 18:20:16.205000 audit[4124]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4031 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636332616132636536366661353231616464623839363361343939 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit: BPF prog-id=148 op=LOAD Mar 17 18:20:16.205000 audit[4124]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4031 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636332616132636536366661353231616464623839363361343939 Mar 17 18:20:16.205000 audit: BPF prog-id=148 op=UNLOAD Mar 17 18:20:16.205000 audit: BPF prog-id=147 op=UNLOAD Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { perfmon } for pid=4124 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit[4124]: AVC avc: denied { bpf } for pid=4124 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.205000 audit: BPF prog-id=149 op=LOAD Mar 17 18:20:16.205000 audit[4124]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4031 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263636332616132636536366661353231616464623839363361343939 Mar 17 18:20:16.213000 audit[4138]: AVC avc: denied { write } for pid=4138 comm="tee" name="fd" dev="proc" ino=21953 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Mar 17 18:20:16.213000 audit[4138]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee72ea0b a2=241 a3=1b6 items=1 ppid=3989 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.213000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Mar 17 18:20:16.213000 audit: PATH item=0 name="/dev/fd/63" inode=21946 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Mar 17 18:20:16.213000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Mar 17 18:20:16.255405 env[1816]: time="2025-03-17T18:20:16.255298044Z" level=info msg="StartContainer for \"bccc2aa2ce66fa521addb8963a499b6324106fff17a0e23c3c90e1bd2e9ab973\" returns successfully" Mar 17 18:20:16.299000 audit[4136]: AVC avc: denied { getattr } for pid=4136 comm="coredns" path="cgroup:[4026532840]" dev="nsfs" ino=4026532840 scontext=system_u:system_r:svirt_lxc_net_t:s0:c358,c716 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Mar 17 18:20:16.299000 audit[4136]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400014c990 a2=400014e578 a3=0 items=0 ppid=4031 pid=4136 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c358,c716 key=(null) Mar 17 18:20:16.299000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Mar 17 18:20:16.553258 systemd[1]: run-containerd-runc-k8s.io-4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26-runc.qv2ag6.mount: Deactivated successfully. Mar 17 18:20:16.657000 audit[4162]: NETFILTER_CFG table=filter:99 family=2 entries=16 op=nft_register_rule pid=4162 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:16.657000 audit[4162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff8cdfe80 a2=0 a3=1 items=0 ppid=2993 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.657000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:16.662087 kubelet[2815]: I0317 18:20:16.661964 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-xg2dg" podStartSLOduration=43.661918683 podStartE2EDuration="43.661918683s" podCreationTimestamp="2025-03-17 18:19:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:20:16.607404023 +0000 UTC m=+47.601404474" watchObservedRunningTime="2025-03-17 18:20:16.661918683 +0000 UTC m=+47.655919074" Mar 17 18:20:16.668000 audit[4162]: NETFILTER_CFG table=nat:100 family=2 entries=14 op=nft_register_rule pid=4162 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:16.668000 audit[4162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffff8cdfe80 a2=0 a3=1 items=0 ppid=2993 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.668000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:16.760000 audit[4165]: NETFILTER_CFG table=filter:101 family=2 entries=13 op=nft_register_rule pid=4165 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:16.760000 audit[4165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe198c8e0 a2=0 a3=1 items=0 ppid=2993 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.760000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:16.778000 audit[4165]: NETFILTER_CFG table=nat:102 family=2 entries=35 op=nft_register_chain pid=4165 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:16.778000 audit[4165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe198c8e0 a2=0 a3=1 items=0 ppid=2993 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.778000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.985000 audit: BPF prog-id=150 op=LOAD Mar 17 18:20:16.985000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff1c6e088 a2=98 a3=fffff1c6e078 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.985000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:16.986000 audit: BPF prog-id=150 op=UNLOAD Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.986000 audit: BPF prog-id=151 op=LOAD Mar 17 18:20:16.986000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff1c6dd18 a2=74 a3=95 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.986000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:16.987000 audit: BPF prog-id=151 op=UNLOAD Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:16.987000 audit: BPF prog-id=152 op=LOAD Mar 17 18:20:16.987000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff1c6dd78 a2=94 a3=2 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:16.987000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:16.987000 audit: BPF prog-id=152 op=UNLOAD Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.230226 kernel: kauditd_printk_skb: 242 callbacks suppressed Mar 17 18:20:17.230343 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.244047 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.253337 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.253486 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.260314 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.276310 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.276472 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.292235 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.292376 kernel: audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.227000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.299555 env[1816]: time="2025-03-17T18:20:17.299485045Z" level=info msg="StopPodSandbox for \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\"" Mar 17 18:20:17.300417 env[1816]: time="2025-03-17T18:20:17.300356265Z" level=info msg="StopPodSandbox for \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\"" Mar 17 18:20:17.227000 audit: BPF prog-id=153 op=LOAD Mar 17 18:20:17.309159 kernel: audit: type=1334 audit(1742235617.227:1072): prog-id=153 op=LOAD Mar 17 18:20:17.227000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff1c6dd38 a2=40 a3=fffff1c6dd68 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.245000 audit: BPF prog-id=153 op=UNLOAD Mar 17 18:20:17.245000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.245000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff1c6de50 a2=50 a3=0 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.245000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.379000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.379000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1c6dda8 a2=28 a3=fffff1c6ded8 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.379000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1c6ddd8 a2=28 a3=fffff1c6df08 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1c6dc88 a2=28 a3=fffff1c6ddb8 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1c6ddf8 a2=28 a3=fffff1c6df28 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1c6ddd8 a2=28 a3=fffff1c6df08 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1c6ddc8 a2=28 a3=fffff1c6def8 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1c6ddf8 a2=28 a3=fffff1c6df28 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1c6ddd8 a2=28 a3=fffff1c6df08 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1c6ddf8 a2=28 a3=fffff1c6df28 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1c6ddc8 a2=28 a3=fffff1c6def8 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.445000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.445000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1c6de48 a2=28 a3=fffff1c6df88 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.445000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff1c6db80 a2=50 a3=0 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.446000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.446000 audit: BPF prog-id=154 op=LOAD Mar 17 18:20:17.446000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff1c6db88 a2=94 a3=5 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.446000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.449000 audit: BPF prog-id=154 op=UNLOAD Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff1c6dc90 a2=50 a3=0 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.449000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff1c6ddd8 a2=4 a3=3 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.449000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.449000 audit[4197]: AVC avc: denied { confidentiality } for pid=4197 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:20:17.449000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff1c6ddb8 a2=94 a3=6 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.449000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.450000 audit[4197]: AVC avc: denied { confidentiality } for pid=4197 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:20:17.450000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff1c6d588 a2=94 a3=83 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.450000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.451000 audit[4197]: AVC avc: denied { confidentiality } for pid=4197 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:20:17.451000 audit[4197]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff1c6d588 a2=94 a3=83 items=0 ppid=3995 pid=4197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.451000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Mar 17 18:20:17.508462 systemd-networkd[1536]: calia3c925e4515: Gained IPv6LL Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.586 [INFO][4225] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.586 [INFO][4225] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" iface="eth0" netns="/var/run/netns/cni-8d01dc2c-f88d-55d9-732a-f62811e962a6" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.586 [INFO][4225] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" iface="eth0" netns="/var/run/netns/cni-8d01dc2c-f88d-55d9-732a-f62811e962a6" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.587 [INFO][4225] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" iface="eth0" netns="/var/run/netns/cni-8d01dc2c-f88d-55d9-732a-f62811e962a6" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.587 [INFO][4225] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.587 [INFO][4225] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.650 [INFO][4244] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.651 [INFO][4244] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.651 [INFO][4244] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.674 [WARNING][4244] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.674 [INFO][4244] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.681 [INFO][4244] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:17.689186 env[1816]: 2025-03-17 18:20:17.687 [INFO][4225] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:17.693840 systemd[1]: run-netns-cni\x2d8d01dc2c\x2df88d\x2d55d9\x2d732a\x2df62811e962a6.mount: Deactivated successfully. Mar 17 18:20:17.695115 env[1816]: time="2025-03-17T18:20:17.694379066Z" level=info msg="TearDown network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\" successfully" Mar 17 18:20:17.695115 env[1816]: time="2025-03-17T18:20:17.694434282Z" level=info msg="StopPodSandbox for \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\" returns successfully" Mar 17 18:20:17.697108 env[1816]: time="2025-03-17T18:20:17.696828112Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67cf458567-jvl9v,Uid:c75faff5-3cef-46ff-ba10-66ea433009f1,Namespace:calico-system,Attempt:1,}" Mar 17 18:20:17.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.97:22-139.178.89.65:37308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:17.722035 systemd[1]: Started sshd@7-172.31.25.97:22-139.178.89.65:37308.service. Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.732000 audit: BPF prog-id=155 op=LOAD Mar 17 18:20:17.732000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe88a96f8 a2=98 a3=ffffe88a96e8 items=0 ppid=3995 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.732000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:20:17.748000 audit: BPF prog-id=155 op=UNLOAD Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit: BPF prog-id=156 op=LOAD Mar 17 18:20:17.748000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe88a95a8 a2=74 a3=95 items=0 ppid=3995 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.748000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:20:17.748000 audit: BPF prog-id=156 op=UNLOAD Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { perfmon } for pid=4256 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit[4256]: AVC avc: denied { bpf } for pid=4256 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:17.748000 audit: BPF prog-id=157 op=LOAD Mar 17 18:20:17.748000 audit[4256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe88a95d8 a2=40 a3=ffffe88a9608 items=0 ppid=3995 pid=4256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.748000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Mar 17 18:20:17.748000 audit: BPF prog-id=157 op=UNLOAD Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.540 [INFO][4226] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.541 [INFO][4226] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" iface="eth0" netns="/var/run/netns/cni-6ba00ac0-c10e-03f0-af82-d6ada847ecff" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.541 [INFO][4226] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" iface="eth0" netns="/var/run/netns/cni-6ba00ac0-c10e-03f0-af82-d6ada847ecff" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.542 [INFO][4226] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" iface="eth0" netns="/var/run/netns/cni-6ba00ac0-c10e-03f0-af82-d6ada847ecff" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.542 [INFO][4226] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.542 [INFO][4226] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.665 [INFO][4239] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.665 [INFO][4239] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.681 [INFO][4239] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.760 [WARNING][4239] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.760 [INFO][4239] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.795 [INFO][4239] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:17.803307 env[1816]: 2025-03-17 18:20:17.800 [INFO][4226] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:17.811243 systemd[1]: run-netns-cni\x2d6ba00ac0\x2dc10e\x2d03f0\x2daf82\x2dd6ada847ecff.mount: Deactivated successfully. Mar 17 18:20:17.812987 env[1816]: time="2025-03-17T18:20:17.812927656Z" level=info msg="TearDown network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\" successfully" Mar 17 18:20:17.813224 env[1816]: time="2025-03-17T18:20:17.813165794Z" level=info msg="StopPodSandbox for \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\" returns successfully" Mar 17 18:20:17.815235 env[1816]: time="2025-03-17T18:20:17.814981061Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2l2mt,Uid:75dff536-0e33-4ad9-9dd6-831e7b94f681,Namespace:calico-system,Attempt:1,}" Mar 17 18:20:17.975000 audit[4255]: USER_ACCT pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:17.978419 sshd[4255]: Accepted publickey for core from 139.178.89.65 port 37308 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:17.978000 audit[4255]: CRED_ACQ pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:17.978000 audit[4255]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbcecca0 a2=3 a3=1 items=0 ppid=1 pid=4255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:17.978000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:17.981157 sshd[4255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:17.996184 systemd[1]: Started session-8.scope. Mar 17 18:20:17.997222 systemd-logind[1810]: New session 8 of user core. Mar 17 18:20:18.014000 audit[4255]: USER_START pid=4255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:18.017000 audit[4295]: CRED_ACQ pid=4295 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:18.059825 systemd-networkd[1536]: vxlan.calico: Link UP Mar 17 18:20:18.059839 systemd-networkd[1536]: vxlan.calico: Gained carrier Mar 17 18:20:18.070291 (udev-worker)[4012]: Network interface NamePolicy= disabled on kernel command line. Mar 17 18:20:18.297931 env[1816]: time="2025-03-17T18:20:18.297854150Z" level=info msg="StopPodSandbox for \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\"" Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.361000 audit: BPF prog-id=158 op=LOAD Mar 17 18:20:18.361000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffbad3268 a2=98 a3=fffffbad3258 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.361000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.377000 audit: BPF prog-id=158 op=UNLOAD Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit: BPF prog-id=159 op=LOAD Mar 17 18:20:18.378000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffbad2f48 a2=74 a3=95 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.378000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.378000 audit: BPF prog-id=159 op=UNLOAD Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit: BPF prog-id=160 op=LOAD Mar 17 18:20:18.378000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffbad2fa8 a2=94 a3=2 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.378000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.378000 audit: BPF prog-id=160 op=UNLOAD Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffbad2fd8 a2=28 a3=fffffbad3108 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.378000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffbad3008 a2=28 a3=fffffbad3138 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.378000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffbad2eb8 a2=28 a3=fffffbad2fe8 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.378000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.378000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.378000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffbad3028 a2=28 a3=fffffbad3158 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.378000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffbad3008 a2=28 a3=fffffbad3138 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffbad2ff8 a2=28 a3=fffffbad3128 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffbad3028 a2=28 a3=fffffbad3158 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffbad3008 a2=28 a3=fffffbad3138 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffbad3028 a2=28 a3=fffffbad3158 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffbad2ff8 a2=28 a3=fffffbad3128 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffbad3078 a2=28 a3=fffffbad31b8 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.379000 audit: BPF prog-id=161 op=LOAD Mar 17 18:20:18.379000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffbad2e98 a2=40 a3=fffffbad2ec8 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.379000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.379000 audit: BPF prog-id=161 op=UNLOAD Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffffbad2ec0 a2=50 a3=0 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.380000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffffbad2ec0 a2=50 a3=0 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.380000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.380000 audit: BPF prog-id=162 op=LOAD Mar 17 18:20:18.380000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffbad2628 a2=94 a3=2 items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.380000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.381000 audit: BPF prog-id=162 op=UNLOAD Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { perfmon } for pid=4351 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit[4351]: AVC avc: denied { bpf } for pid=4351 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.381000 audit: BPF prog-id=163 op=LOAD Mar 17 18:20:18.381000 audit[4351]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffbad27b8 a2=94 a3=2d items=0 ppid=3995 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.411000 audit: BPF prog-id=164 op=LOAD Mar 17 18:20:18.411000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff82af3b8 a2=98 a3=fffff82af3a8 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.411000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:18.412000 audit: BPF prog-id=164 op=UNLOAD Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.413000 audit: BPF prog-id=165 op=LOAD Mar 17 18:20:18.413000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff82af048 a2=74 a3=95 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.413000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:18.416000 audit: BPF prog-id=165 op=UNLOAD Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:18.416000 audit: BPF prog-id=166 op=LOAD Mar 17 18:20:18.416000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff82af0a8 a2=94 a3=2 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:18.416000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:18.420000 audit: BPF prog-id=166 op=UNLOAD Mar 17 18:20:18.472039 sshd[4255]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:18.473000 audit[4255]: USER_END pid=4255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:18.474000 audit[4255]: CRED_DISP pid=4255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:18.478198 systemd[1]: sshd@7-172.31.25.97:22-139.178.89.65:37308.service: Deactivated successfully. Mar 17 18:20:18.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.97:22-139.178.89.65:37308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:18.479668 systemd[1]: session-8.scope: Deactivated successfully. Mar 17 18:20:18.481088 systemd-logind[1810]: Session 8 logged out. Waiting for processes to exit. Mar 17 18:20:18.483952 systemd-logind[1810]: Removed session 8. Mar 17 18:20:18.532576 (udev-worker)[4335]: Network interface NamePolicy= disabled on kernel command line. Mar 17 18:20:18.554635 systemd-networkd[1536]: cali524726e99fb: Link UP Mar 17 18:20:18.559651 systemd-networkd[1536]: cali524726e99fb: Gained carrier Mar 17 18:20:18.560452 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali524726e99fb: link becomes ready Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.040 [INFO][4278] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0 csi-node-driver- calico-system 75dff536-0e33-4ad9-9dd6-831e7b94f681 792 0 2025-03-17 18:19:48 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:84cddb44f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-25-97 csi-node-driver-2l2mt eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali524726e99fb [] []}} ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.040 [INFO][4278] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.238 [INFO][4309] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" HandleID="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.415 [INFO][4309] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" HandleID="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004cd70), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-97", "pod":"csi-node-driver-2l2mt", "timestamp":"2025-03-17 18:20:18.238193571 +0000 UTC"}, Hostname:"ip-172-31-25-97", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.415 [INFO][4309] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.415 [INFO][4309] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.415 [INFO][4309] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-97' Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.429 [INFO][4309] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.445 [INFO][4309] ipam/ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.458 [INFO][4309] ipam/ipam.go 489: Trying affinity for 192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.463 [INFO][4309] ipam/ipam.go 155: Attempting to load block cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.482 [INFO][4309] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.482 [INFO][4309] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.33.128/26 handle="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.491 [INFO][4309] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270 Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.505 [INFO][4309] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.33.128/26 handle="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.525 [INFO][4309] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.33.130/26] block=192.168.33.128/26 handle="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.525 [INFO][4309] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.33.130/26] handle="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" host="ip-172-31-25-97" Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.525 [INFO][4309] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:18.617590 env[1816]: 2025-03-17 18:20:18.525 [INFO][4309] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.33.130/26] IPv6=[] ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" HandleID="k8s-pod-network.724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:18.619360 env[1816]: 2025-03-17 18:20:18.529 [INFO][4278] cni-plugin/k8s.go 386: Populated endpoint ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75dff536-0e33-4ad9-9dd6-831e7b94f681", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"", Pod:"csi-node-driver-2l2mt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.33.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali524726e99fb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:18.619360 env[1816]: 2025-03-17 18:20:18.529 [INFO][4278] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.33.130/32] ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:18.619360 env[1816]: 2025-03-17 18:20:18.529 [INFO][4278] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali524726e99fb ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:18.619360 env[1816]: 2025-03-17 18:20:18.562 [INFO][4278] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:18.619360 env[1816]: 2025-03-17 18:20:18.562 [INFO][4278] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75dff536-0e33-4ad9-9dd6-831e7b94f681", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270", Pod:"csi-node-driver-2l2mt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.33.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali524726e99fb", MAC:"9a:33:c8:c6:32:4b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:18.619360 env[1816]: 2025-03-17 18:20:18.609 [INFO][4278] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270" Namespace="calico-system" Pod="csi-node-driver-2l2mt" WorkloadEndpoint="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:18.721894 systemd-networkd[1536]: cali55b2e5e9a6d: Link UP Mar 17 18:20:18.728451 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali55b2e5e9a6d: link becomes ready Mar 17 18:20:18.728806 systemd-networkd[1536]: cali55b2e5e9a6d: Gained carrier Mar 17 18:20:18.747338 env[1816]: time="2025-03-17T18:20:18.746674440Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:20:18.747338 env[1816]: time="2025-03-17T18:20:18.746769747Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:20:18.747338 env[1816]: time="2025-03-17T18:20:18.746797073Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:20:18.747338 env[1816]: time="2025-03-17T18:20:18.747058822Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270 pid=4379 runtime=io.containerd.runc.v2 Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:17.999 [INFO][4259] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0 calico-kube-controllers-67cf458567- calico-system c75faff5-3cef-46ff-ba10-66ea433009f1 797 0 2025-03-17 18:19:48 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:67cf458567 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-25-97 calico-kube-controllers-67cf458567-jvl9v eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali55b2e5e9a6d [] []}} ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.000 [INFO][4259] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.230 [INFO][4297] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" HandleID="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.419 [INFO][4297] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" HandleID="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004da60), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-97", "pod":"calico-kube-controllers-67cf458567-jvl9v", "timestamp":"2025-03-17 18:20:18.230374932 +0000 UTC"}, Hostname:"ip-172-31-25-97", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.419 [INFO][4297] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.526 [INFO][4297] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.526 [INFO][4297] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-97' Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.530 [INFO][4297] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.576 [INFO][4297] ipam/ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.620 [INFO][4297] ipam/ipam.go 489: Trying affinity for 192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.627 [INFO][4297] ipam/ipam.go 155: Attempting to load block cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.634 [INFO][4297] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.634 [INFO][4297] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.33.128/26 handle="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.638 [INFO][4297] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0 Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.658 [INFO][4297] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.33.128/26 handle="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.685 [INFO][4297] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.33.131/26] block=192.168.33.128/26 handle="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.685 [INFO][4297] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.33.131/26] handle="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" host="ip-172-31-25-97" Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.686 [INFO][4297] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:18.778643 env[1816]: 2025-03-17 18:20:18.686 [INFO][4297] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.33.131/26] IPv6=[] ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" HandleID="k8s-pod-network.17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:18.779995 env[1816]: 2025-03-17 18:20:18.703 [INFO][4259] cni-plugin/k8s.go 386: Populated endpoint ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0", GenerateName:"calico-kube-controllers-67cf458567-", Namespace:"calico-system", SelfLink:"", UID:"c75faff5-3cef-46ff-ba10-66ea433009f1", ResourceVersion:"797", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67cf458567", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"", Pod:"calico-kube-controllers-67cf458567-jvl9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.33.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali55b2e5e9a6d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:18.779995 env[1816]: 2025-03-17 18:20:18.703 [INFO][4259] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.33.131/32] ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:18.779995 env[1816]: 2025-03-17 18:20:18.703 [INFO][4259] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali55b2e5e9a6d ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:18.779995 env[1816]: 2025-03-17 18:20:18.734 [INFO][4259] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:18.779995 env[1816]: 2025-03-17 18:20:18.738 [INFO][4259] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0", GenerateName:"calico-kube-controllers-67cf458567-", Namespace:"calico-system", SelfLink:"", UID:"c75faff5-3cef-46ff-ba10-66ea433009f1", ResourceVersion:"797", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67cf458567", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0", Pod:"calico-kube-controllers-67cf458567-jvl9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.33.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali55b2e5e9a6d", MAC:"36:54:52:4e:bc:f8", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:18.779995 env[1816]: 2025-03-17 18:20:18.761 [INFO][4259] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0" Namespace="calico-system" Pod="calico-kube-controllers-67cf458567-jvl9v" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:18.819615 systemd[1]: Started cri-containerd-724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270.scope. Mar 17 18:20:18.837459 systemd[1]: run-containerd-runc-k8s.io-724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270-runc.sJTZTS.mount: Deactivated successfully. Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.596 [INFO][4346] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.597 [INFO][4346] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" iface="eth0" netns="/var/run/netns/cni-314c1f62-3503-ef6a-4aa7-50b75fb7b5ce" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.597 [INFO][4346] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" iface="eth0" netns="/var/run/netns/cni-314c1f62-3503-ef6a-4aa7-50b75fb7b5ce" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.598 [INFO][4346] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" iface="eth0" netns="/var/run/netns/cni-314c1f62-3503-ef6a-4aa7-50b75fb7b5ce" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.598 [INFO][4346] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.599 [INFO][4346] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.795 [INFO][4359] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.798 [INFO][4359] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.798 [INFO][4359] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.844 [WARNING][4359] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.845 [INFO][4359] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.850 [INFO][4359] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:18.869365 env[1816]: 2025-03-17 18:20:18.865 [INFO][4346] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:18.873782 systemd[1]: run-netns-cni\x2d314c1f62\x2d3503\x2def6a\x2d4aa7\x2d50b75fb7b5ce.mount: Deactivated successfully. Mar 17 18:20:18.875736 env[1816]: time="2025-03-17T18:20:18.875005722Z" level=info msg="TearDown network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\" successfully" Mar 17 18:20:18.875736 env[1816]: time="2025-03-17T18:20:18.875268311Z" level=info msg="StopPodSandbox for \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\" returns successfully" Mar 17 18:20:18.876807 env[1816]: time="2025-03-17T18:20:18.876734765Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-p6zsv,Uid:2fe2a44e-7dcf-4985-b48e-f96f72114148,Namespace:kube-system,Attempt:1,}" Mar 17 18:20:18.888306 env[1816]: time="2025-03-17T18:20:18.887753530Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:20:18.888306 env[1816]: time="2025-03-17T18:20:18.887830088Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:20:18.888306 env[1816]: time="2025-03-17T18:20:18.887856874Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:20:18.888306 env[1816]: time="2025-03-17T18:20:18.888184564Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0 pid=4417 runtime=io.containerd.runc.v2 Mar 17 18:20:18.931286 systemd[1]: Started cri-containerd-17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0.scope. Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.008000 audit: BPF prog-id=167 op=LOAD Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633564376233306439333362663362393139653934376131623838 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633564376233306439333362663362393139653934376131623838 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.010000 audit: BPF prog-id=168 op=LOAD Mar 17 18:20:19.010000 audit[4427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633564376233306439333362663362393139653934376131623838 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit: BPF prog-id=169 op=LOAD Mar 17 18:20:19.011000 audit[4427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633564376233306439333362663362393139653934376131623838 Mar 17 18:20:19.011000 audit: BPF prog-id=169 op=UNLOAD Mar 17 18:20:19.011000 audit: BPF prog-id=168 op=UNLOAD Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { perfmon } for pid=4427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit[4427]: AVC avc: denied { bpf } for pid=4427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.011000 audit: BPF prog-id=170 op=LOAD Mar 17 18:20:19.011000 audit[4427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4417 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633564376233306439333362663362393139653934376131623838 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.080000 audit: BPF prog-id=171 op=LOAD Mar 17 18:20:19.082000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.082000 audit[4391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4379 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732346664653137633866623234613631353538393833646438323532 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4379 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732346664653137633866623234613631353538393833646438323532 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.083000 audit: BPF prog-id=172 op=LOAD Mar 17 18:20:19.083000 audit[4391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4379 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732346664653137633866623234613631353538393833646438323532 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.085000 audit: BPF prog-id=173 op=LOAD Mar 17 18:20:19.085000 audit[4391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4379 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732346664653137633866623234613631353538393833646438323532 Mar 17 18:20:19.086000 audit: BPF prog-id=173 op=UNLOAD Mar 17 18:20:19.086000 audit: BPF prog-id=172 op=UNLOAD Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.086000 audit: BPF prog-id=174 op=LOAD Mar 17 18:20:19.086000 audit[4391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4379 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732346664653137633866623234613631353538393833646438323532 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.116000 audit: BPF prog-id=175 op=LOAD Mar 17 18:20:19.116000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff82af068 a2=40 a3=fffff82af098 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.117000 audit: BPF prog-id=175 op=UNLOAD Mar 17 18:20:19.117000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.117000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff82af180 a2=50 a3=0 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.117000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.191691 env[1816]: time="2025-03-17T18:20:19.191631825Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-67cf458567-jvl9v,Uid:c75faff5-3cef-46ff-ba10-66ea433009f1,Namespace:calico-system,Attempt:1,} returns sandbox id \"17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0\"" Mar 17 18:20:19.203664 env[1816]: time="2025-03-17T18:20:19.203595290Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\"" Mar 17 18:20:19.291682 env[1816]: time="2025-03-17T18:20:19.291528513Z" level=info msg="StopPodSandbox for \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\"" Mar 17 18:20:19.293283 env[1816]: time="2025-03-17T18:20:19.293196147Z" level=info msg="StopPodSandbox for \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\"" Mar 17 18:20:19.364480 systemd-networkd[1536]: vxlan.calico: Gained IPv6LL Mar 17 18:20:19.375333 env[1816]: time="2025-03-17T18:20:19.375275999Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2l2mt,Uid:75dff536-0e33-4ad9-9dd6-831e7b94f681,Namespace:calico-system,Attempt:1,} returns sandbox id \"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270\"" Mar 17 18:20:19.552846 systemd-networkd[1536]: cali86e03ad5b56: Link UP Mar 17 18:20:19.562367 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:20:19.562698 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali86e03ad5b56: link becomes ready Mar 17 18:20:19.562972 systemd-networkd[1536]: cali86e03ad5b56: Gained carrier Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.071 [INFO][4438] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0 coredns-668d6bf9bc- kube-system 2fe2a44e-7dcf-4985-b48e-f96f72114148 812 0 2025-03-17 18:19:33 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-97 coredns-668d6bf9bc-p6zsv eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali86e03ad5b56 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.071 [INFO][4438] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.249 [INFO][4462] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" HandleID="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.281 [INFO][4462] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" HandleID="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002836f0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-97", "pod":"coredns-668d6bf9bc-p6zsv", "timestamp":"2025-03-17 18:20:19.249326583 +0000 UTC"}, Hostname:"ip-172-31-25-97", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.281 [INFO][4462] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.281 [INFO][4462] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.282 [INFO][4462] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-97' Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.319 [INFO][4462] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.414 [INFO][4462] ipam/ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.430 [INFO][4462] ipam/ipam.go 489: Trying affinity for 192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.434 [INFO][4462] ipam/ipam.go 155: Attempting to load block cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.446 [INFO][4462] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.447 [INFO][4462] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.33.128/26 handle="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.450 [INFO][4462] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.482 [INFO][4462] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.33.128/26 handle="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.541 [INFO][4462] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.33.132/26] block=192.168.33.128/26 handle="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.541 [INFO][4462] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.33.132/26] handle="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" host="ip-172-31-25-97" Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.542 [INFO][4462] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:19.600538 env[1816]: 2025-03-17 18:20:19.542 [INFO][4462] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.33.132/26] IPv6=[] ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" HandleID="k8s-pod-network.051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:19.601948 env[1816]: 2025-03-17 18:20:19.546 [INFO][4438] cni-plugin/k8s.go 386: Populated endpoint ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2fe2a44e-7dcf-4985-b48e-f96f72114148", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"", Pod:"coredns-668d6bf9bc-p6zsv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86e03ad5b56", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:19.601948 env[1816]: 2025-03-17 18:20:19.546 [INFO][4438] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.33.132/32] ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:19.601948 env[1816]: 2025-03-17 18:20:19.546 [INFO][4438] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali86e03ad5b56 ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:19.601948 env[1816]: 2025-03-17 18:20:19.565 [INFO][4438] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:19.601948 env[1816]: 2025-03-17 18:20:19.568 [INFO][4438] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2fe2a44e-7dcf-4985-b48e-f96f72114148", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c", Pod:"coredns-668d6bf9bc-p6zsv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86e03ad5b56", MAC:"1e:47:47:5e:da:fd", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:19.601948 env[1816]: 2025-03-17 18:20:19.596 [INFO][4438] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c" Namespace="kube-system" Pod="coredns-668d6bf9bc-p6zsv" WorkloadEndpoint="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:19.650000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.650000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff82af0d8 a2=28 a3=fffff82af208 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.650000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.654000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.654000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff82af108 a2=28 a3=fffff82af238 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.654000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.654000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff82aefb8 a2=28 a3=fffff82af0e8 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.655000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.655000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff82af128 a2=28 a3=fffff82af258 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.655000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.655000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff82af108 a2=28 a3=fffff82af238 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.655000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.655000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff82af0f8 a2=28 a3=fffff82af228 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.655000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.655000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff82af128 a2=28 a3=fffff82af258 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.655000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.655000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff82af108 a2=28 a3=fffff82af238 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.655000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.655000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff82af128 a2=28 a3=fffff82af258 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.655000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.655000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff82af0f8 a2=28 a3=fffff82af228 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.656000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.656000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff82af178 a2=28 a3=fffff82af2b8 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.656000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.661000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.661000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff82aeeb0 a2=50 a3=0 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.661000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.663000 audit: BPF prog-id=176 op=LOAD Mar 17 18:20:19.663000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff82aeeb8 a2=94 a3=5 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.663000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.666000 audit: BPF prog-id=176 op=UNLOAD Mar 17 18:20:19.666000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.666000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff82aefc0 a2=50 a3=0 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.666000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.666000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.666000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff82af108 a2=4 a3=3 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.666000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.669000 audit[4354]: AVC avc: denied { confidentiality } for pid=4354 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:20:19.669000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff82af0e8 a2=94 a3=6 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.669000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.680000 audit[4354]: AVC avc: denied { confidentiality } for pid=4354 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:20:19.680000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff82ae8b8 a2=94 a3=83 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.680000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { perfmon } for pid=4354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.681000 audit[4354]: AVC avc: denied { confidentiality } for pid=4354 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Mar 17 18:20:19.681000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff82ae8b8 a2=94 a3=83 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.681000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.682000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.682000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff82b02f8 a2=10 a3=fffff82b03e8 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.682000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.686000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.686000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff82b01b8 a2=10 a3=fffff82b02a8 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.686000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.697000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.697000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff82b0128 a2=10 a3=fffff82b02a8 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.697000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.697000 audit[4354]: AVC avc: denied { bpf } for pid=4354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.697000 audit[4354]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff82b0128 a2=10 a3=fffff82b02a8 items=0 ppid=3995 pid=4354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.697000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Mar 17 18:20:19.734000 audit: BPF prog-id=163 op=UNLOAD Mar 17 18:20:19.797305 env[1816]: time="2025-03-17T18:20:19.796753376Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:20:19.797305 env[1816]: time="2025-03-17T18:20:19.796840563Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:20:19.797305 env[1816]: time="2025-03-17T18:20:19.796866246Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:20:19.798384 env[1816]: time="2025-03-17T18:20:19.798274563Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c pid=4545 runtime=io.containerd.runc.v2 Mar 17 18:20:19.898043 systemd[1]: run-containerd-runc-k8s.io-051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c-runc.FrsiIs.mount: Deactivated successfully. Mar 17 18:20:19.906687 systemd[1]: Started cri-containerd-051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c.scope. Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.619 [INFO][4508] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.619 [INFO][4508] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" iface="eth0" netns="/var/run/netns/cni-2ba1b609-1fe1-1e54-669d-ee3b63ef7c36" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.620 [INFO][4508] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" iface="eth0" netns="/var/run/netns/cni-2ba1b609-1fe1-1e54-669d-ee3b63ef7c36" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.620 [INFO][4508] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" iface="eth0" netns="/var/run/netns/cni-2ba1b609-1fe1-1e54-669d-ee3b63ef7c36" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.620 [INFO][4508] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.620 [INFO][4508] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.853 [INFO][4532] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.854 [INFO][4532] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.854 [INFO][4532] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.918 [WARNING][4532] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.918 [INFO][4532] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.924 [INFO][4532] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:19.929385 env[1816]: 2025-03-17 18:20:19.926 [INFO][4508] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:19.930592 env[1816]: time="2025-03-17T18:20:19.930523240Z" level=info msg="TearDown network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\" successfully" Mar 17 18:20:19.930723 env[1816]: time="2025-03-17T18:20:19.930588318Z" level=info msg="StopPodSandbox for \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\" returns successfully" Mar 17 18:20:19.931810 env[1816]: time="2025-03-17T18:20:19.931757735Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-5w4cr,Uid:794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:20:19.939498 systemd-networkd[1536]: cali524726e99fb: Gained IPv6LL Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.980000 audit: BPF prog-id=177 op=LOAD Mar 17 18:20:19.982000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.982000 audit[4565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4545 pid=4565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316136633038353433386232346638356261343262626536346439 Mar 17 18:20:19.982000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.982000 audit[4565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4545 pid=4565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316136633038353433386232346638356261343262626536346439 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.986000 audit: BPF prog-id=178 op=LOAD Mar 17 18:20:19.986000 audit[4565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4545 pid=4565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316136633038353433386232346638356261343262626536346439 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.989000 audit: BPF prog-id=179 op=LOAD Mar 17 18:20:19.989000 audit[4565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4545 pid=4565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316136633038353433386232346638356261343262626536346439 Mar 17 18:20:19.992000 audit: BPF prog-id=179 op=UNLOAD Mar 17 18:20:19.992000 audit: BPF prog-id=178 op=UNLOAD Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { perfmon } for pid=4565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit[4565]: AVC avc: denied { bpf } for pid=4565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:19.992000 audit: BPF prog-id=180 op=LOAD Mar 17 18:20:19.992000 audit[4565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4545 pid=4565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:19.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035316136633038353433386232346638356261343262626536346439 Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.644 [INFO][4507] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.644 [INFO][4507] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" iface="eth0" netns="/var/run/netns/cni-bc9a9a00-d6f4-b198-dbdf-7b686e095ce5" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.646 [INFO][4507] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" iface="eth0" netns="/var/run/netns/cni-bc9a9a00-d6f4-b198-dbdf-7b686e095ce5" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.646 [INFO][4507] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" iface="eth0" netns="/var/run/netns/cni-bc9a9a00-d6f4-b198-dbdf-7b686e095ce5" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.646 [INFO][4507] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.646 [INFO][4507] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.941 [INFO][4538] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.941 [INFO][4538] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.941 [INFO][4538] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.969 [WARNING][4538] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.969 [INFO][4538] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.978 [INFO][4538] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:19.997621 env[1816]: 2025-03-17 18:20:19.986 [INFO][4507] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:19.999129 env[1816]: time="2025-03-17T18:20:19.999058243Z" level=info msg="TearDown network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\" successfully" Mar 17 18:20:19.999370 env[1816]: time="2025-03-17T18:20:19.999319564Z" level=info msg="StopPodSandbox for \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\" returns successfully" Mar 17 18:20:20.002136 env[1816]: time="2025-03-17T18:20:20.002078509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-s9n4g,Uid:3bceefdc-d795-4cdf-8750-ffa14ad2fd30,Namespace:calico-apiserver,Attempt:1,}" Mar 17 18:20:20.003427 systemd-networkd[1536]: cali55b2e5e9a6d: Gained IPv6LL Mar 17 18:20:20.138760 env[1816]: time="2025-03-17T18:20:20.138684803Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-p6zsv,Uid:2fe2a44e-7dcf-4985-b48e-f96f72114148,Namespace:kube-system,Attempt:1,} returns sandbox id \"051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c\"" Mar 17 18:20:20.150825 env[1816]: time="2025-03-17T18:20:20.150656389Z" level=info msg="CreateContainer within sandbox \"051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Mar 17 18:20:20.223658 env[1816]: time="2025-03-17T18:20:20.223572941Z" level=info msg="CreateContainer within sandbox \"051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"95b177df0090722c2265576114c7de6e868ed166687f12212d43f7e59d466de9\"" Mar 17 18:20:20.225374 env[1816]: time="2025-03-17T18:20:20.225321079Z" level=info msg="StartContainer for \"95b177df0090722c2265576114c7de6e868ed166687f12212d43f7e59d466de9\"" Mar 17 18:20:20.307000 audit[4643]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=4643 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:20:20.307000 audit[4643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffec12af10 a2=0 a3=ffffbb3adfa8 items=0 ppid=3995 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.307000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:20:20.325000 audit[4650]: NETFILTER_CFG table=mangle:104 family=2 entries=16 op=nft_register_chain pid=4650 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:20:20.325000 audit[4650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffece45d00 a2=0 a3=ffffb9929fa8 items=0 ppid=3995 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.325000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:20:20.339509 systemd[1]: Started cri-containerd-95b177df0090722c2265576114c7de6e868ed166687f12212d43f7e59d466de9.scope. Mar 17 18:20:20.405000 audit[4665]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=4665 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:20:20.405000 audit[4665]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe77ba780 a2=0 a3=ffffa7141fa8 items=0 ppid=3995 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.405000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:20:20.415000 audit[4655]: NETFILTER_CFG table=filter:106 family=2 entries=69 op=nft_register_chain pid=4655 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:20:20.415000 audit[4655]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=36404 a0=3 a1=ffffc815c020 a2=0 a3=ffffa0beafa8 items=0 ppid=3995 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.415000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:20:20.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.450000 audit: BPF prog-id=181 op=LOAD Mar 17 18:20:20.451000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.451000 audit[4657]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4545 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623137376466303039303732326332323635353736313134633764 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4545 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623137376466303039303732326332323635353736313134633764 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.452000 audit: BPF prog-id=182 op=LOAD Mar 17 18:20:20.452000 audit[4657]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4545 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623137376466303039303732326332323635353736313134633764 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit: BPF prog-id=183 op=LOAD Mar 17 18:20:20.453000 audit[4657]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4545 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623137376466303039303732326332323635353736313134633764 Mar 17 18:20:20.453000 audit: BPF prog-id=183 op=UNLOAD Mar 17 18:20:20.453000 audit: BPF prog-id=182 op=UNLOAD Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { perfmon } for pid=4657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit[4657]: AVC avc: denied { bpf } for pid=4657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.453000 audit: BPF prog-id=184 op=LOAD Mar 17 18:20:20.453000 audit[4657]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4545 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935623137376466303039303732326332323635353736313134633764 Mar 17 18:20:20.507504 env[1816]: time="2025-03-17T18:20:20.507403097Z" level=info msg="StartContainer for \"95b177df0090722c2265576114c7de6e868ed166687f12212d43f7e59d466de9\" returns successfully" Mar 17 18:20:20.566547 systemd-networkd[1536]: cali22516bce9e9: Link UP Mar 17 18:20:20.579637 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Mar 17 18:20:20.579783 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali22516bce9e9: link becomes ready Mar 17 18:20:20.580079 systemd-networkd[1536]: cali22516bce9e9: Gained carrier Mar 17 18:20:20.587000 audit[4673]: AVC avc: denied { getattr } for pid=4673 comm="coredns" path="cgroup:[4026532862]" dev="nsfs" ino=4026532862 scontext=system_u:system_r:svirt_lxc_net_t:s0:c903,c934 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Mar 17 18:20:20.587000 audit[4673]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056798 a2=400014c578 a3=0 items=0 ppid=4545 pid=4673 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c903,c934 key=(null) Mar 17 18:20:20.587000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Mar 17 18:20:20.644502 kubelet[2815]: I0317 18:20:20.644414 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-p6zsv" podStartSLOduration=47.64439004 podStartE2EDuration="47.64439004s" podCreationTimestamp="2025-03-17 18:19:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-03-17 18:20:20.64256815 +0000 UTC m=+51.636568541" watchObservedRunningTime="2025-03-17 18:20:20.64439004 +0000 UTC m=+51.638390407" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.164 [INFO][4588] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0 calico-apiserver-58f8c8bbc6- calico-apiserver 794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b 828 0 2025-03-17 18:19:46 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:58f8c8bbc6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-25-97 calico-apiserver-58f8c8bbc6-5w4cr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali22516bce9e9 [] []}} ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.165 [INFO][4588] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.371 [INFO][4635] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" HandleID="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.425 [INFO][4635] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" HandleID="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003b4260), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-25-97", "pod":"calico-apiserver-58f8c8bbc6-5w4cr", "timestamp":"2025-03-17 18:20:20.37194697 +0000 UTC"}, Hostname:"ip-172-31-25-97", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.425 [INFO][4635] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.425 [INFO][4635] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.426 [INFO][4635] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-97' Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.431 [INFO][4635] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.439 [INFO][4635] ipam/ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.486 [INFO][4635] ipam/ipam.go 489: Trying affinity for 192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.492 [INFO][4635] ipam/ipam.go 155: Attempting to load block cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.498 [INFO][4635] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.499 [INFO][4635] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.33.128/26 handle="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.513 [INFO][4635] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6 Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.523 [INFO][4635] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.33.128/26 handle="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.558 [INFO][4635] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.33.133/26] block=192.168.33.128/26 handle="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.558 [INFO][4635] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.33.133/26] handle="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" host="ip-172-31-25-97" Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.558 [INFO][4635] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:20.656186 env[1816]: 2025-03-17 18:20:20.558 [INFO][4635] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.33.133/26] IPv6=[] ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" HandleID="k8s-pod-network.b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:20.657461 env[1816]: 2025-03-17 18:20:20.561 [INFO][4588] cni-plugin/k8s.go 386: Populated endpoint ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b", ResourceVersion:"828", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"", Pod:"calico-apiserver-58f8c8bbc6-5w4cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali22516bce9e9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:20.657461 env[1816]: 2025-03-17 18:20:20.562 [INFO][4588] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.33.133/32] ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:20.657461 env[1816]: 2025-03-17 18:20:20.562 [INFO][4588] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali22516bce9e9 ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:20.657461 env[1816]: 2025-03-17 18:20:20.581 [INFO][4588] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:20.657461 env[1816]: 2025-03-17 18:20:20.602 [INFO][4588] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b", ResourceVersion:"828", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6", Pod:"calico-apiserver-58f8c8bbc6-5w4cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali22516bce9e9", MAC:"ba:52:14:21:86:a7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:20.657461 env[1816]: 2025-03-17 18:20:20.653 [INFO][4588] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-5w4cr" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:20.704739 systemd[1]: run-netns-cni\x2d2ba1b609\x2d1fe1\x2d1e54\x2d669d\x2dee3b63ef7c36.mount: Deactivated successfully. Mar 17 18:20:20.711910 systemd[1]: run-netns-cni\x2dbc9a9a00\x2dd6f4\x2db198\x2ddbdf\x2d7b686e095ce5.mount: Deactivated successfully. Mar 17 18:20:20.732430 env[1816]: time="2025-03-17T18:20:20.732281749Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:20:20.732737 env[1816]: time="2025-03-17T18:20:20.732367329Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:20:20.735331 env[1816]: time="2025-03-17T18:20:20.732870111Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:20:20.735331 env[1816]: time="2025-03-17T18:20:20.733196862Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6 pid=4719 runtime=io.containerd.runc.v2 Mar 17 18:20:20.799351 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidea0e613113: link becomes ready Mar 17 18:20:20.800267 systemd-networkd[1536]: calidea0e613113: Link UP Mar 17 18:20:20.800688 systemd-networkd[1536]: calidea0e613113: Gained carrier Mar 17 18:20:20.804000 audit[4732]: NETFILTER_CFG table=filter:107 family=2 entries=10 op=nft_register_rule pid=4732 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:20.804000 audit[4732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd0f93be0 a2=0 a3=1 items=0 ppid=2993 pid=4732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.220 [INFO][4602] cni-plugin/plugin.go 325: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0 calico-apiserver-58f8c8bbc6- calico-apiserver 3bceefdc-d795-4cdf-8750-ffa14ad2fd30 829 0 2025-03-17 18:19:46 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:58f8c8bbc6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-25-97 calico-apiserver-58f8c8bbc6-s9n4g eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidea0e613113 [] []}} ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.220 [INFO][4602] cni-plugin/k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.426 [INFO][4642] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" HandleID="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.472 [INFO][4642] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" HandleID="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400039c510), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-25-97", "pod":"calico-apiserver-58f8c8bbc6-s9n4g", "timestamp":"2025-03-17 18:20:20.42685983 +0000 UTC"}, Hostname:"ip-172-31-25-97", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.472 [INFO][4642] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.558 [INFO][4642] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.558 [INFO][4642] ipam/ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-97' Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.581 [INFO][4642] ipam/ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.611 [INFO][4642] ipam/ipam.go 372: Looking up existing affinities for host host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.652 [INFO][4642] ipam/ipam.go 489: Trying affinity for 192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.687 [INFO][4642] ipam/ipam.go 155: Attempting to load block cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.718 [INFO][4642] ipam/ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.33.128/26 host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.718 [INFO][4642] ipam/ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.33.128/26 handle="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.726 [INFO][4642] ipam/ipam.go 1685: Creating new handle: k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636 Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.758 [INFO][4642] ipam/ipam.go 1203: Writing block in order to claim IPs block=192.168.33.128/26 handle="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.782 [INFO][4642] ipam/ipam.go 1216: Successfully claimed IPs: [192.168.33.134/26] block=192.168.33.128/26 handle="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.782 [INFO][4642] ipam/ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.33.134/26] handle="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" host="ip-172-31-25-97" Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.782 [INFO][4642] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:20.838010 env[1816]: 2025-03-17 18:20:20.783 [INFO][4642] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.33.134/26] IPv6=[] ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" HandleID="k8s-pod-network.d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:20.839895 env[1816]: 2025-03-17 18:20:20.786 [INFO][4602] cni-plugin/k8s.go 386: Populated endpoint ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bceefdc-d795-4cdf-8750-ffa14ad2fd30", ResourceVersion:"829", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"", Pod:"calico-apiserver-58f8c8bbc6-s9n4g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidea0e613113", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:20.839895 env[1816]: 2025-03-17 18:20:20.787 [INFO][4602] cni-plugin/k8s.go 387: Calico CNI using IPs: [192.168.33.134/32] ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:20.839895 env[1816]: 2025-03-17 18:20:20.787 [INFO][4602] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidea0e613113 ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:20.839895 env[1816]: 2025-03-17 18:20:20.800 [INFO][4602] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:20.839895 env[1816]: 2025-03-17 18:20:20.803 [INFO][4602] cni-plugin/k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bceefdc-d795-4cdf-8750-ffa14ad2fd30", ResourceVersion:"829", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636", Pod:"calico-apiserver-58f8c8bbc6-s9n4g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidea0e613113", MAC:"c2:d4:6d:f7:d9:83", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:20.839895 env[1816]: 2025-03-17 18:20:20.826 [INFO][4602] cni-plugin/k8s.go 500: Wrote updated endpoint to datastore ContainerID="d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636" Namespace="calico-apiserver" Pod="calico-apiserver-58f8c8bbc6-s9n4g" WorkloadEndpoint="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:20.857757 systemd[1]: run-containerd-runc-k8s.io-b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6-runc.2Usu9M.mount: Deactivated successfully. Mar 17 18:20:20.851000 audit[4732]: NETFILTER_CFG table=nat:108 family=2 entries=44 op=nft_register_rule pid=4732 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:20.851000 audit[4732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffd0f93be0 a2=0 a3=1 items=0 ppid=2993 pid=4732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:20.866000 audit[4731]: NETFILTER_CFG table=filter:109 family=2 entries=92 op=nft_register_chain pid=4731 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:20:20.866000 audit[4731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53060 a0=3 a1=ffffe19b4e30 a2=0 a3=ffff8abf5fa8 items=0 ppid=3995 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.866000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:20:20.881522 systemd[1]: Started cri-containerd-b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6.scope. Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.947000 audit: BPF prog-id=185 op=LOAD Mar 17 18:20:20.949000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.949000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4719 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230666365323231316263383136653134383535313761666365366132 Mar 17 18:20:20.949000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.949000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4719 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230666365323231316263383136653134383535313761666365366132 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit: BPF prog-id=186 op=LOAD Mar 17 18:20:20.950000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4719 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230666365323231316263383136653134383535313761666365366132 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.950000 audit: BPF prog-id=187 op=LOAD Mar 17 18:20:20.950000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4719 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230666365323231316263383136653134383535313761666365366132 Mar 17 18:20:20.950000 audit: BPF prog-id=187 op=UNLOAD Mar 17 18:20:20.951000 audit: BPF prog-id=186 op=UNLOAD Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { perfmon } for pid=4730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit[4730]: AVC avc: denied { bpf } for pid=4730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:20.951000 audit: BPF prog-id=188 op=LOAD Mar 17 18:20:20.951000 audit[4730]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4719 pid=4730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:20.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230666365323231316263383136653134383535313761666365366132 Mar 17 18:20:20.990921 env[1816]: time="2025-03-17T18:20:20.990760720Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Mar 17 18:20:20.991259 env[1816]: time="2025-03-17T18:20:20.991152946Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Mar 17 18:20:20.991539 env[1816]: time="2025-03-17T18:20:20.991470916Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Mar 17 18:20:20.992127 env[1816]: time="2025-03-17T18:20:20.992048374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636 pid=4768 runtime=io.containerd.runc.v2 Mar 17 18:20:21.067838 systemd[1]: Started cri-containerd-d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636.scope. Mar 17 18:20:21.119000 audit[4790]: NETFILTER_CFG table=filter:110 family=2 entries=78 op=nft_register_chain pid=4790 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Mar 17 18:20:21.119000 audit[4790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=44468 a0=3 a1=ffffd0daf410 a2=0 a3=ffffa6fa4fa8 items=0 ppid=3995 pid=4790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:21.119000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.171000 audit: BPF prog-id=189 op=LOAD Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4768 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:21.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434643734323662383364643661646162616436643239636463306334 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4768 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:21.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434643734323662383364643661646162616436643239636463306334 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit: BPF prog-id=190 op=LOAD Mar 17 18:20:21.172000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4768 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:21.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434643734323662383364643661646162616436643239636463306334 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.172000 audit: BPF prog-id=191 op=LOAD Mar 17 18:20:21.172000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4768 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:21.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434643734323662383364643661646162616436643239636463306334 Mar 17 18:20:21.173000 audit: BPF prog-id=191 op=UNLOAD Mar 17 18:20:21.173000 audit: BPF prog-id=190 op=UNLOAD Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:21.173000 audit: BPF prog-id=192 op=LOAD Mar 17 18:20:21.173000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4768 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:21.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434643734323662383364643661646162616436643239636463306334 Mar 17 18:20:21.188398 env[1816]: time="2025-03-17T18:20:21.188339721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-5w4cr,Uid:794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6\"" Mar 17 18:20:21.317292 env[1816]: time="2025-03-17T18:20:21.317199030Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-58f8c8bbc6-s9n4g,Uid:3bceefdc-d795-4cdf-8750-ffa14ad2fd30,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636\"" Mar 17 18:20:21.539469 systemd-networkd[1536]: cali86e03ad5b56: Gained IPv6LL Mar 17 18:20:21.731403 systemd-networkd[1536]: cali22516bce9e9: Gained IPv6LL Mar 17 18:20:21.987381 systemd-networkd[1536]: calidea0e613113: Gained IPv6LL Mar 17 18:20:22.455045 env[1816]: time="2025-03-17T18:20:22.453768493Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:22.458019 env[1816]: time="2025-03-17T18:20:22.457964116Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:32c335fdb9d757e7ba6a76a9cfa8d292a5a229101ae7ea37b42f53c28adf2db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:22.461565 env[1816]: time="2025-03-17T18:20:22.461488226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:22.465289 env[1816]: time="2025-03-17T18:20:22.465193915Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:1072d6a98167a14ca361e9ce757733f9bae36d1f1c6a9621ea10934b6b1e10d9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:22.466622 env[1816]: time="2025-03-17T18:20:22.466563764Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.29.1\" returns image reference \"sha256:32c335fdb9d757e7ba6a76a9cfa8d292a5a229101ae7ea37b42f53c28adf2db1\"" Mar 17 18:20:22.472310 env[1816]: time="2025-03-17T18:20:22.472250461Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\"" Mar 17 18:20:22.503040 env[1816]: time="2025-03-17T18:20:22.502975841Z" level=info msg="CreateContainer within sandbox \"17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Mar 17 18:20:22.535875 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1619076330.mount: Deactivated successfully. Mar 17 18:20:22.546459 env[1816]: time="2025-03-17T18:20:22.546383174Z" level=info msg="CreateContainer within sandbox \"17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"1059e96a433f85906ac4dc905754eca199c3999c2bab70193df93ff5287cc3b3\"" Mar 17 18:20:22.549057 env[1816]: time="2025-03-17T18:20:22.547525271Z" level=info msg="StartContainer for \"1059e96a433f85906ac4dc905754eca199c3999c2bab70193df93ff5287cc3b3\"" Mar 17 18:20:22.605369 systemd[1]: Started cri-containerd-1059e96a433f85906ac4dc905754eca199c3999c2bab70193df93ff5287cc3b3.scope. Mar 17 18:20:22.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.646230 kernel: kauditd_printk_skb: 799 callbacks suppressed Mar 17 18:20:22.646324 kernel: audit: type=1400 audit(1742235622.644:1283): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.662535 kernel: audit: type=1400 audit(1742235622.652:1284): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.672178 kernel: audit: type=1400 audit(1742235622.652:1285): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.672320 kernel: audit: type=1400 audit(1742235622.652:1286): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.686608 kernel: audit: type=1400 audit(1742235622.652:1287): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.694659 kernel: audit: type=1400 audit(1742235622.652:1288): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.728089 kernel: audit: type=1400 audit(1742235622.652:1289): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.736373 kernel: audit: type=1400 audit(1742235622.652:1290): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.736509 kernel: audit: type=1400 audit(1742235622.652:1291): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.750280 kernel: audit: type=1400 audit(1742235622.653:1292): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.653000 audit: BPF prog-id=193 op=LOAD Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4417 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:22.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130353965393661343333663835393036616334646339303537353465 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4417 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:22.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130353965393661343333663835393036616334646339303537353465 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit: BPF prog-id=194 op=LOAD Mar 17 18:20:22.654000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4417 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:22.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130353965393661343333663835393036616334646339303537353465 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit: BPF prog-id=195 op=LOAD Mar 17 18:20:22.654000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4417 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:22.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130353965393661343333663835393036616334646339303537353465 Mar 17 18:20:22.654000 audit: BPF prog-id=195 op=UNLOAD Mar 17 18:20:22.654000 audit: BPF prog-id=194 op=UNLOAD Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:22.654000 audit: BPF prog-id=196 op=LOAD Mar 17 18:20:22.654000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4417 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:22.654000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130353965393661343333663835393036616334646339303537353465 Mar 17 18:20:22.772000 audit[4843]: NETFILTER_CFG table=filter:111 family=2 entries=10 op=nft_register_rule pid=4843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:22.772000 audit[4843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd55d0840 a2=0 a3=1 items=0 ppid=2993 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:22.772000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:22.813000 audit[4843]: NETFILTER_CFG table=nat:112 family=2 entries=56 op=nft_register_chain pid=4843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:22.813000 audit[4843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffd55d0840 a2=0 a3=1 items=0 ppid=2993 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:22.813000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:22.816578 env[1816]: time="2025-03-17T18:20:22.816407973Z" level=info msg="StartContainer for \"1059e96a433f85906ac4dc905754eca199c3999c2bab70193df93ff5287cc3b3\" returns successfully" Mar 17 18:20:23.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.97:22-139.178.89.65:36714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:23.499462 systemd[1]: Started sshd@8-172.31.25.97:22-139.178.89.65:36714.service. Mar 17 18:20:23.707974 systemd[1]: run-containerd-runc-k8s.io-1059e96a433f85906ac4dc905754eca199c3999c2bab70193df93ff5287cc3b3-runc.2ZIcGJ.mount: Deactivated successfully. Mar 17 18:20:23.713000 audit[4858]: USER_ACCT pid=4858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:23.714968 sshd[4858]: Accepted publickey for core from 139.178.89.65 port 36714 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:23.715000 audit[4858]: CRED_ACQ pid=4858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:23.716000 audit[4858]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd4f86e0 a2=3 a3=1 items=0 ppid=1 pid=4858 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:23.716000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:23.719701 sshd[4858]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:23.729072 systemd-logind[1810]: New session 9 of user core. Mar 17 18:20:23.730114 systemd[1]: Started session-9.scope. Mar 17 18:20:23.738000 audit[4858]: USER_START pid=4858 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:23.741000 audit[4871]: CRED_ACQ pid=4871 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:23.808470 kubelet[2815]: I0317 18:20:23.808363 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-67cf458567-jvl9v" podStartSLOduration=32.542323813 podStartE2EDuration="35.808339293s" podCreationTimestamp="2025-03-17 18:19:48 +0000 UTC" firstStartedPulling="2025-03-17 18:20:19.202476724 +0000 UTC m=+50.196477091" lastFinishedPulling="2025-03-17 18:20:22.468492216 +0000 UTC m=+53.462492571" observedRunningTime="2025-03-17 18:20:23.661782323 +0000 UTC m=+54.655782738" watchObservedRunningTime="2025-03-17 18:20:23.808339293 +0000 UTC m=+54.802339672" Mar 17 18:20:24.009379 sshd[4858]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:24.010000 audit[4858]: USER_END pid=4858 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:24.011000 audit[4858]: CRED_DISP pid=4858 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:24.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.97:22-139.178.89.65:36714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:24.015369 systemd[1]: sshd@8-172.31.25.97:22-139.178.89.65:36714.service: Deactivated successfully. Mar 17 18:20:24.016900 systemd[1]: session-9.scope: Deactivated successfully. Mar 17 18:20:24.019287 systemd-logind[1810]: Session 9 logged out. Waiting for processes to exit. Mar 17 18:20:24.021927 systemd-logind[1810]: Removed session 9. Mar 17 18:20:24.488000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:24.488000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40020ca240 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:20:24.488000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:20:24.499000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:24.499000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002394b40 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:20:24.499000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:20:25.272817 env[1816]: time="2025-03-17T18:20:25.272757990Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:25.276547 env[1816]: time="2025-03-17T18:20:25.276494542Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3c11734f3001b7070e7e2b5e64938f89891cf8c44f8997e86aa23c5d5bf70163,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:25.279716 env[1816]: time="2025-03-17T18:20:25.279652246Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:25.283000 env[1816]: time="2025-03-17T18:20:25.282950181Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:eaa7e01fb16b603c155a67b81f16992281db7f831684c7b2081d3434587a7ff3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:25.284002 env[1816]: time="2025-03-17T18:20:25.283944096Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.29.1\" returns image reference \"sha256:3c11734f3001b7070e7e2b5e64938f89891cf8c44f8997e86aa23c5d5bf70163\"" Mar 17 18:20:25.289060 env[1816]: time="2025-03-17T18:20:25.288987873Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:20:25.295705 env[1816]: time="2025-03-17T18:20:25.295647026Z" level=info msg="CreateContainer within sandbox \"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Mar 17 18:20:25.322000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:25.322000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=40046548e0 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:20:25.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:20:25.324000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7339 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:25.324000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4006795110 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:20:25.324000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:20:25.334000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:25.334000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4006795440 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:20:25.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:20:25.335000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:25.335000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4006795470 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:20:25.335000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:20:25.335980 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount375571615.mount: Deactivated successfully. Mar 17 18:20:25.348731 env[1816]: time="2025-03-17T18:20:25.348667731Z" level=info msg="CreateContainer within sandbox \"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"34883037f2eebda6fd0d89efd7c5a3f8d042f3661218e83bae91f2661dd6e2df\"" Mar 17 18:20:25.350330 env[1816]: time="2025-03-17T18:20:25.350242030Z" level=info msg="StartContainer for \"34883037f2eebda6fd0d89efd7c5a3f8d042f3661218e83bae91f2661dd6e2df\"" Mar 17 18:20:25.416298 systemd[1]: Started cri-containerd-34883037f2eebda6fd0d89efd7c5a3f8d042f3661218e83bae91f2661dd6e2df.scope. Mar 17 18:20:25.448000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:25.448000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4007e8e9c0 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:20:25.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:20:25.450000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:25.450000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4007285230 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:20:25.450000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4379 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:25.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334383833303337663265656264613666643064383965666437633561 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit: BPF prog-id=197 op=LOAD Mar 17 18:20:25.475000 audit[4899]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4379 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:25.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334383833303337663265656264613666643064383965666437633561 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit: BPF prog-id=198 op=LOAD Mar 17 18:20:25.475000 audit[4899]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4379 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:25.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334383833303337663265656264613666643064383965666437633561 Mar 17 18:20:25.475000 audit: BPF prog-id=198 op=UNLOAD Mar 17 18:20:25.475000 audit: BPF prog-id=197 op=UNLOAD Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { perfmon } for pid=4899 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit[4899]: AVC avc: denied { bpf } for pid=4899 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:25.475000 audit: BPF prog-id=199 op=LOAD Mar 17 18:20:25.475000 audit[4899]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4379 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:25.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334383833303337663265656264613666643064383965666437633561 Mar 17 18:20:25.503662 env[1816]: time="2025-03-17T18:20:25.503598153Z" level=info msg="StartContainer for \"34883037f2eebda6fd0d89efd7c5a3f8d042f3661218e83bae91f2661dd6e2df\" returns successfully" Mar 17 18:20:29.055804 kernel: kauditd_printk_skb: 131 callbacks suppressed Mar 17 18:20:29.056363 kernel: audit: type=1130 audit(1742235629.038:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.97:22-139.178.89.65:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:29.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.97:22-139.178.89.65:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:29.036916 systemd[1]: Started sshd@9-172.31.25.97:22-139.178.89.65:36724.service. Mar 17 18:20:29.232677 env[1816]: time="2025-03-17T18:20:29.232627673Z" level=info msg="StopPodSandbox for \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\"" Mar 17 18:20:29.249000 audit[4931]: USER_ACCT pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.260446 sshd[4931]: Accepted publickey for core from 139.178.89.65 port 36724 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:29.276159 kernel: audit: type=1101 audit(1742235629.249:1327): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.276355 kernel: audit: type=1103 audit(1742235629.261:1328): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.261000 audit[4931]: CRED_ACQ pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.264610 sshd[4931]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:29.291926 systemd-logind[1810]: New session 10 of user core. Mar 17 18:20:29.293692 systemd[1]: Started session-10.scope. Mar 17 18:20:29.305180 kernel: audit: type=1006 audit(1742235629.261:1329): pid=4931 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Mar 17 18:20:29.305477 kernel: audit: type=1300 audit(1742235629.261:1329): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea10e7a0 a2=3 a3=1 items=0 ppid=1 pid=4931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:29.261000 audit[4931]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea10e7a0 a2=3 a3=1 items=0 ppid=1 pid=4931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:29.314839 kernel: audit: type=1327 audit(1742235629.261:1329): proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:29.261000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:29.321000 audit[4931]: USER_START pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.345190 kernel: audit: type=1105 audit(1742235629.321:1330): pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.345375 kernel: audit: type=1103 audit(1742235629.333:1331): pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.333000 audit[4943]: CRED_ACQ pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.532 [WARNING][4948] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5", ResourceVersion:"762", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26", Pod:"coredns-668d6bf9bc-xg2dg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3c925e4515", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.533 [INFO][4948] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.533 [INFO][4948] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" iface="eth0" netns="" Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.533 [INFO][4948] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.533 [INFO][4948] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.626 [INFO][4961] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.627 [INFO][4961] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.627 [INFO][4961] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.643 [WARNING][4961] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.648 [INFO][4961] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.652 [INFO][4961] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:29.658492 env[1816]: 2025-03-17 18:20:29.654 [INFO][4948] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.659743 env[1816]: time="2025-03-17T18:20:29.659691465Z" level=info msg="TearDown network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\" successfully" Mar 17 18:20:29.659883 env[1816]: time="2025-03-17T18:20:29.659849614Z" level=info msg="StopPodSandbox for \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\" returns successfully" Mar 17 18:20:29.663734 env[1816]: time="2025-03-17T18:20:29.663683522Z" level=info msg="RemovePodSandbox for \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\"" Mar 17 18:20:29.663992 env[1816]: time="2025-03-17T18:20:29.663930727Z" level=info msg="Forcibly stopping sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\"" Mar 17 18:20:29.672890 sshd[4931]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:29.673000 audit[4931]: USER_END pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.685760 systemd[1]: sshd@9-172.31.25.97:22-139.178.89.65:36724.service: Deactivated successfully. Mar 17 18:20:29.687106 systemd[1]: session-10.scope: Deactivated successfully. Mar 17 18:20:29.701926 kernel: audit: type=1106 audit(1742235629.673:1332): pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.702580 kernel: audit: type=1104 audit(1742235629.673:1333): pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.673000 audit[4931]: CRED_DISP pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:29.703126 systemd-logind[1810]: Session 10 logged out. Waiting for processes to exit. Mar 17 18:20:29.705522 systemd-logind[1810]: Removed session 10. Mar 17 18:20:29.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.97:22-139.178.89.65:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:29.887000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:29.887000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40020ca420 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:20:29.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:20:29.887000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:29.887000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40020ca440 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:20:29.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:20:29.888000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:29.888000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40020ca460 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:20:29.888000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:20:29.902000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:20:29.902000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40020caa60 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:20:29.902000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.851 [WARNING][4984] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"1a5e122d-9ee1-403e-b9a1-8c1f1fc711b5", ResourceVersion:"762", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"4043009b684255355f22ef56423c418bd306072619214a59d733d87429aa2a26", Pod:"coredns-668d6bf9bc-xg2dg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia3c925e4515", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.851 [INFO][4984] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.851 [INFO][4984] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" iface="eth0" netns="" Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.851 [INFO][4984] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.851 [INFO][4984] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.905 [INFO][4990] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.905 [INFO][4990] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.905 [INFO][4990] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.919 [WARNING][4990] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.919 [INFO][4990] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" HandleID="k8s-pod-network.a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--xg2dg-eth0" Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.923 [INFO][4990] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:29.933188 env[1816]: 2025-03-17 18:20:29.927 [INFO][4984] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c" Mar 17 18:20:29.935324 env[1816]: time="2025-03-17T18:20:29.933853021Z" level=info msg="TearDown network for sandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\" successfully" Mar 17 18:20:29.945960 env[1816]: time="2025-03-17T18:20:29.945900576Z" level=info msg="RemovePodSandbox \"a86950cdc553df9ee1d1d16c6c36beb847b303d4e44122c4667a61ca1e3ae10c\" returns successfully" Mar 17 18:20:29.947099 env[1816]: time="2025-03-17T18:20:29.947053449Z" level=info msg="StopPodSandbox for \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\"" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.052 [WARNING][5010] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0", GenerateName:"calico-kube-controllers-67cf458567-", Namespace:"calico-system", SelfLink:"", UID:"c75faff5-3cef-46ff-ba10-66ea433009f1", ResourceVersion:"877", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67cf458567", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0", Pod:"calico-kube-controllers-67cf458567-jvl9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.33.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali55b2e5e9a6d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.052 [INFO][5010] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.052 [INFO][5010] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" iface="eth0" netns="" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.052 [INFO][5010] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.053 [INFO][5010] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.117 [INFO][5016] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.117 [INFO][5016] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.117 [INFO][5016] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.130 [WARNING][5016] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.130 [INFO][5016] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.133 [INFO][5016] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:30.141824 env[1816]: 2025-03-17 18:20:30.139 [INFO][5010] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.142934 env[1816]: time="2025-03-17T18:20:30.141875047Z" level=info msg="TearDown network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\" successfully" Mar 17 18:20:30.142934 env[1816]: time="2025-03-17T18:20:30.141925905Z" level=info msg="StopPodSandbox for \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\" returns successfully" Mar 17 18:20:30.142934 env[1816]: time="2025-03-17T18:20:30.142779416Z" level=info msg="RemovePodSandbox for \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\"" Mar 17 18:20:30.142934 env[1816]: time="2025-03-17T18:20:30.142831665Z" level=info msg="Forcibly stopping sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\"" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.262 [WARNING][5037] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0", GenerateName:"calico-kube-controllers-67cf458567-", Namespace:"calico-system", SelfLink:"", UID:"c75faff5-3cef-46ff-ba10-66ea433009f1", ResourceVersion:"877", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"67cf458567", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"17c5d7b30d933bf3b919e947a1b882c5c5bb6bb2f4f1fe8521bd11a5b6664ff0", Pod:"calico-kube-controllers-67cf458567-jvl9v", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.33.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali55b2e5e9a6d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.263 [INFO][5037] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.263 [INFO][5037] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" iface="eth0" netns="" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.263 [INFO][5037] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.263 [INFO][5037] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.321 [INFO][5043] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.321 [INFO][5043] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.321 [INFO][5043] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.337 [WARNING][5043] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.337 [INFO][5043] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" HandleID="k8s-pod-network.aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Workload="ip--172--31--25--97-k8s-calico--kube--controllers--67cf458567--jvl9v-eth0" Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.340 [INFO][5043] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:30.346764 env[1816]: 2025-03-17 18:20:30.343 [INFO][5037] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc" Mar 17 18:20:30.348329 env[1816]: time="2025-03-17T18:20:30.346860962Z" level=info msg="TearDown network for sandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\" successfully" Mar 17 18:20:30.356068 env[1816]: time="2025-03-17T18:20:30.353526619Z" level=info msg="RemovePodSandbox \"aabc1f0ba28199f0b2129679b6662e3097dd606a690723580526d3d43e57e1fc\" returns successfully" Mar 17 18:20:30.359258 env[1816]: time="2025-03-17T18:20:30.356580848Z" level=info msg="StopPodSandbox for \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\"" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.491 [WARNING][5067] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2fe2a44e-7dcf-4985-b48e-f96f72114148", ResourceVersion:"861", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c", Pod:"coredns-668d6bf9bc-p6zsv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86e03ad5b56", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.491 [INFO][5067] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.491 [INFO][5067] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" iface="eth0" netns="" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.491 [INFO][5067] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.491 [INFO][5067] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.539 [INFO][5075] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.540 [INFO][5075] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.540 [INFO][5075] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.553 [WARNING][5075] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.553 [INFO][5075] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.556 [INFO][5075] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:30.561768 env[1816]: 2025-03-17 18:20:30.559 [INFO][5067] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.562797 env[1816]: time="2025-03-17T18:20:30.561799910Z" level=info msg="TearDown network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\" successfully" Mar 17 18:20:30.562797 env[1816]: time="2025-03-17T18:20:30.561849279Z" level=info msg="StopPodSandbox for \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\" returns successfully" Mar 17 18:20:30.567354 env[1816]: time="2025-03-17T18:20:30.567292478Z" level=info msg="RemovePodSandbox for \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\"" Mar 17 18:20:30.567532 env[1816]: time="2025-03-17T18:20:30.567360168Z" level=info msg="Forcibly stopping sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\"" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.709 [WARNING][5096] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"2fe2a44e-7dcf-4985-b48e-f96f72114148", ResourceVersion:"861", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 33, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"051a6c085438b24f85ba42bbe64d9e87bf2917f9586169da01eaf8394363771c", Pod:"coredns-668d6bf9bc-p6zsv", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.33.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali86e03ad5b56", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.710 [INFO][5096] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.710 [INFO][5096] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" iface="eth0" netns="" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.710 [INFO][5096] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.710 [INFO][5096] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.759 [INFO][5102] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.760 [INFO][5102] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.760 [INFO][5102] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.777 [WARNING][5102] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.777 [INFO][5102] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" HandleID="k8s-pod-network.176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Workload="ip--172--31--25--97-k8s-coredns--668d6bf9bc--p6zsv-eth0" Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.780 [INFO][5102] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:30.786840 env[1816]: 2025-03-17 18:20:30.782 [INFO][5096] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238" Mar 17 18:20:30.786840 env[1816]: time="2025-03-17T18:20:30.784799686Z" level=info msg="TearDown network for sandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\" successfully" Mar 17 18:20:30.791774 env[1816]: time="2025-03-17T18:20:30.791695777Z" level=info msg="RemovePodSandbox \"176623f953bc615708f2fc0b9e819eb2f0a06ac1ebb087bdff29b2c4f420f238\" returns successfully" Mar 17 18:20:30.792673 env[1816]: time="2025-03-17T18:20:30.792625485Z" level=info msg="StopPodSandbox for \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\"" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.882 [WARNING][5124] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bceefdc-d795-4cdf-8750-ffa14ad2fd30", ResourceVersion:"848", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636", Pod:"calico-apiserver-58f8c8bbc6-s9n4g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidea0e613113", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.883 [INFO][5124] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.883 [INFO][5124] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" iface="eth0" netns="" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.883 [INFO][5124] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.883 [INFO][5124] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.924 [INFO][5130] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.924 [INFO][5130] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.925 [INFO][5130] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.938 [WARNING][5130] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.938 [INFO][5130] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.942 [INFO][5130] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:30.947424 env[1816]: 2025-03-17 18:20:30.944 [INFO][5124] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:30.948531 env[1816]: time="2025-03-17T18:20:30.947464563Z" level=info msg="TearDown network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\" successfully" Mar 17 18:20:30.948531 env[1816]: time="2025-03-17T18:20:30.947516572Z" level=info msg="StopPodSandbox for \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\" returns successfully" Mar 17 18:20:30.948531 env[1816]: time="2025-03-17T18:20:30.948171393Z" level=info msg="RemovePodSandbox for \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\"" Mar 17 18:20:30.948531 env[1816]: time="2025-03-17T18:20:30.948258459Z" level=info msg="Forcibly stopping sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\"" Mar 17 18:20:31.024783 env[1816]: time="2025-03-17T18:20:31.024723519Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.045385 env[1816]: time="2025-03-17T18:20:31.044321825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.070860 env[1816]: time="2025-03-17T18:20:31.068083383Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.092090 env[1816]: time="2025-03-17T18:20:31.092004929Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.093140 env[1816]: time="2025-03-17T18:20:31.093059707Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c\"" Mar 17 18:20:31.096537 env[1816]: time="2025-03-17T18:20:31.096370160Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\"" Mar 17 18:20:31.107938 env[1816]: time="2025-03-17T18:20:31.107696706Z" level=info msg="CreateContainer within sandbox \"b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:20:31.155111 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2147120823.mount: Deactivated successfully. Mar 17 18:20:31.167667 env[1816]: time="2025-03-17T18:20:31.167602741Z" level=info msg="CreateContainer within sandbox \"b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"84f58e28c9f8a974eeda1e49871740b2efe572f9b6f3fd5385d8254a5b02bc8d\"" Mar 17 18:20:31.170489 env[1816]: time="2025-03-17T18:20:31.169068125Z" level=info msg="StartContainer for \"84f58e28c9f8a974eeda1e49871740b2efe572f9b6f3fd5385d8254a5b02bc8d\"" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.077 [WARNING][5149] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"3bceefdc-d795-4cdf-8750-ffa14ad2fd30", ResourceVersion:"848", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636", Pod:"calico-apiserver-58f8c8bbc6-s9n4g", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidea0e613113", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.077 [INFO][5149] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.077 [INFO][5149] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" iface="eth0" netns="" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.077 [INFO][5149] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.078 [INFO][5149] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.145 [INFO][5155] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.146 [INFO][5155] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.146 [INFO][5155] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.159 [WARNING][5155] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.159 [INFO][5155] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" HandleID="k8s-pod-network.76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--s9n4g-eth0" Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.161 [INFO][5155] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:31.180977 env[1816]: 2025-03-17 18:20:31.164 [INFO][5149] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9" Mar 17 18:20:31.180977 env[1816]: time="2025-03-17T18:20:31.172891126Z" level=info msg="TearDown network for sandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\" successfully" Mar 17 18:20:31.180977 env[1816]: time="2025-03-17T18:20:31.179710389Z" level=info msg="RemovePodSandbox \"76ca814dae678aa71bfb27613b9afd2e50e3cab9a7ca675049312b8a804ecac9\" returns successfully" Mar 17 18:20:31.180977 env[1816]: time="2025-03-17T18:20:31.180863751Z" level=info msg="StopPodSandbox for \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\"" Mar 17 18:20:31.260565 systemd[1]: Started cri-containerd-84f58e28c9f8a974eeda1e49871740b2efe572f9b6f3fd5385d8254a5b02bc8d.scope. Mar 17 18:20:31.281731 systemd[1]: run-containerd-runc-k8s.io-84f58e28c9f8a974eeda1e49871740b2efe572f9b6f3fd5385d8254a5b02bc8d-runc.6Nlrrj.mount: Deactivated successfully. Mar 17 18:20:31.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.336000 audit: BPF prog-id=200 op=LOAD Mar 17 18:20:31.337000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.337000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4719 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663538653238633966386139373465656461316534393837313734 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4719 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663538653238633966386139373465656461316534393837313734 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit: BPF prog-id=201 op=LOAD Mar 17 18:20:31.338000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4719 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663538653238633966386139373465656461316534393837313734 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit: BPF prog-id=202 op=LOAD Mar 17 18:20:31.338000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4719 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663538653238633966386139373465656461316534393837313734 Mar 17 18:20:31.338000 audit: BPF prog-id=202 op=UNLOAD Mar 17 18:20:31.338000 audit: BPF prog-id=201 op=UNLOAD Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { perfmon } for pid=5189 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit[5189]: AVC avc: denied { bpf } for pid=5189 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.338000 audit: BPF prog-id=203 op=LOAD Mar 17 18:20:31.338000 audit[5189]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4719 pid=5189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834663538653238633966386139373465656461316534393837313734 Mar 17 18:20:31.431352 env[1816]: time="2025-03-17T18:20:31.431285935Z" level=info msg="StartContainer for \"84f58e28c9f8a974eeda1e49871740b2efe572f9b6f3fd5385d8254a5b02bc8d\" returns successfully" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.319 [WARNING][5184] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b", ResourceVersion:"843", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6", Pod:"calico-apiserver-58f8c8bbc6-5w4cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali22516bce9e9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.320 [INFO][5184] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.320 [INFO][5184] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" iface="eth0" netns="" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.320 [INFO][5184] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.320 [INFO][5184] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.420 [INFO][5207] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.420 [INFO][5207] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.421 [INFO][5207] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.442 [WARNING][5207] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.442 [INFO][5207] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.445 [INFO][5207] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:31.451686 env[1816]: 2025-03-17 18:20:31.448 [INFO][5184] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.451686 env[1816]: time="2025-03-17T18:20:31.451511821Z" level=info msg="TearDown network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\" successfully" Mar 17 18:20:31.451686 env[1816]: time="2025-03-17T18:20:31.451557880Z" level=info msg="StopPodSandbox for \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\" returns successfully" Mar 17 18:20:31.455518 env[1816]: time="2025-03-17T18:20:31.455462717Z" level=info msg="RemovePodSandbox for \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\"" Mar 17 18:20:31.455785 env[1816]: time="2025-03-17T18:20:31.455724636Z" level=info msg="Forcibly stopping sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\"" Mar 17 18:20:31.469124 env[1816]: time="2025-03-17T18:20:31.469044865Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.476997 env[1816]: time="2025-03-17T18:20:31.476935978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.483381 env[1816]: time="2025-03-17T18:20:31.483322657Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.488780 env[1816]: time="2025-03-17T18:20:31.488678623Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.29.1\" returns image reference \"sha256:5451b31bd8d0784796fa1204c4ec22975a270e21feadf2c5095fe41a38524c6c\"" Mar 17 18:20:31.491713 env[1816]: time="2025-03-17T18:20:31.491643835Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:b8c43e264fe52e0c327b0bf3ac882a0224b33bdd7f4ff58a74242da7d9b00486,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:31.493673 env[1816]: time="2025-03-17T18:20:31.493617483Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\"" Mar 17 18:20:31.496641 env[1816]: time="2025-03-17T18:20:31.496550037Z" level=info msg="CreateContainer within sandbox \"d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Mar 17 18:20:31.526981 env[1816]: time="2025-03-17T18:20:31.526902676Z" level=info msg="CreateContainer within sandbox \"d4d7426b83dd6adabad6d29cdc0c4132fe0517dcd9c54aff2ed79528ecd2e636\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"b8722264697298a87dbcda9da83459d68ab3e9e2a0c3593196f25f13186fd8b3\"" Mar 17 18:20:31.528114 env[1816]: time="2025-03-17T18:20:31.527893615Z" level=info msg="StartContainer for \"b8722264697298a87dbcda9da83459d68ab3e9e2a0c3593196f25f13186fd8b3\"" Mar 17 18:20:31.605102 systemd[1]: Started cri-containerd-b8722264697298a87dbcda9da83459d68ab3e9e2a0c3593196f25f13186fd8b3.scope. Mar 17 18:20:31.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.737000 audit: BPF prog-id=204 op=LOAD Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000151b38 a2=10 a3=0 items=0 ppid=4768 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238373232323634363937323938613837646263646139646138333435 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001515a0 a2=3c a3=0 items=0 ppid=4768 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238373232323634363937323938613837646263646139646138333435 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.738000 audit: BPF prog-id=205 op=LOAD Mar 17 18:20:31.738000 audit[5249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001518e0 a2=78 a3=0 items=0 ppid=4768 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238373232323634363937323938613837646263646139646138333435 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit: BPF prog-id=206 op=LOAD Mar 17 18:20:31.739000 audit[5249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000151670 a2=78 a3=0 items=0 ppid=4768 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238373232323634363937323938613837646263646139646138333435 Mar 17 18:20:31.739000 audit: BPF prog-id=206 op=UNLOAD Mar 17 18:20:31.739000 audit: BPF prog-id=205 op=UNLOAD Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { perfmon } for pid=5249 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit[5249]: AVC avc: denied { bpf } for pid=5249 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:31.739000 audit: BPF prog-id=207 op=LOAD Mar 17 18:20:31.739000 audit[5249]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000151b40 a2=78 a3=0 items=0 ppid=4768 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238373232323634363937323938613837646263646139646138333435 Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.599 [WARNING][5236] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0", GenerateName:"calico-apiserver-58f8c8bbc6-", Namespace:"calico-apiserver", SelfLink:"", UID:"794a54a9-08ea-4ce8-9b23-31b1a7c0bb2b", ResourceVersion:"843", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"58f8c8bbc6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"b0fce2211bc816e1485517afce6a2b5596f103f64a70203c3952b4a17b6cc9e6", Pod:"calico-apiserver-58f8c8bbc6-5w4cr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.33.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali22516bce9e9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.599 [INFO][5236] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.599 [INFO][5236] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" iface="eth0" netns="" Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.599 [INFO][5236] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.599 [INFO][5236] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.670 [INFO][5259] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.671 [INFO][5259] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.671 [INFO][5259] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.730 [WARNING][5259] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.730 [INFO][5259] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" HandleID="k8s-pod-network.189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Workload="ip--172--31--25--97-k8s-calico--apiserver--58f8c8bbc6--5w4cr-eth0" Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.738 [INFO][5259] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:31.749948 env[1816]: 2025-03-17 18:20:31.745 [INFO][5236] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281" Mar 17 18:20:31.751133 env[1816]: time="2025-03-17T18:20:31.751078676Z" level=info msg="TearDown network for sandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\" successfully" Mar 17 18:20:31.758246 env[1816]: time="2025-03-17T18:20:31.758113715Z" level=info msg="RemovePodSandbox \"189048258640bfb242d98c7e2bd6237257fc7798ccbf3396e08c9520f823d281\" returns successfully" Mar 17 18:20:31.759641 env[1816]: time="2025-03-17T18:20:31.759590868Z" level=info msg="StopPodSandbox for \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\"" Mar 17 18:20:31.809000 audit[5295]: NETFILTER_CFG table=filter:113 family=2 entries=10 op=nft_register_rule pid=5295 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:31.809000 audit[5295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffcd362cb0 a2=0 a3=1 items=0 ppid=2993 pid=5295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.809000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:31.817000 audit[5295]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=5295 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:31.817000 audit[5295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffcd362cb0 a2=0 a3=1 items=0 ppid=2993 pid=5295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:31.817000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:31.908133 env[1816]: time="2025-03-17T18:20:31.907986213Z" level=info msg="StartContainer for \"b8722264697298a87dbcda9da83459d68ab3e9e2a0c3593196f25f13186fd8b3\" returns successfully" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.872 [WARNING][5289] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75dff536-0e33-4ad9-9dd6-831e7b94f681", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270", Pod:"csi-node-driver-2l2mt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.33.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali524726e99fb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.873 [INFO][5289] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.873 [INFO][5289] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" iface="eth0" netns="" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.873 [INFO][5289] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.873 [INFO][5289] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.933 [INFO][5303] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.934 [INFO][5303] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.934 [INFO][5303] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.950 [WARNING][5303] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.950 [INFO][5303] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.955 [INFO][5303] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:31.959167 env[1816]: 2025-03-17 18:20:31.957 [INFO][5289] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:31.960176 env[1816]: time="2025-03-17T18:20:31.960123811Z" level=info msg="TearDown network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\" successfully" Mar 17 18:20:31.960361 env[1816]: time="2025-03-17T18:20:31.960326653Z" level=info msg="StopPodSandbox for \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\" returns successfully" Mar 17 18:20:31.961110 env[1816]: time="2025-03-17T18:20:31.961065812Z" level=info msg="RemovePodSandbox for \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\"" Mar 17 18:20:31.961461 env[1816]: time="2025-03-17T18:20:31.961388210Z" level=info msg="Forcibly stopping sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\"" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.062 [WARNING][5326] cni-plugin/k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"75dff536-0e33-4ad9-9dd6-831e7b94f681", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2025, time.March, 17, 18, 19, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"84cddb44f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-97", ContainerID:"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270", Pod:"csi-node-driver-2l2mt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.33.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali524726e99fb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.062 [INFO][5326] cni-plugin/k8s.go 608: Cleaning up netns ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.062 [INFO][5326] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" iface="eth0" netns="" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.063 [INFO][5326] cni-plugin/k8s.go 615: Releasing IP address(es) ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.063 [INFO][5326] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.166 [INFO][5332] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.167 [INFO][5332] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.167 [INFO][5332] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.183 [WARNING][5332] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.183 [INFO][5332] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" HandleID="k8s-pod-network.f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Workload="ip--172--31--25--97-k8s-csi--node--driver--2l2mt-eth0" Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.186 [INFO][5332] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Mar 17 18:20:32.190757 env[1816]: 2025-03-17 18:20:32.188 [INFO][5326] cni-plugin/k8s.go 621: Teardown processing complete. ContainerID="f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb" Mar 17 18:20:32.192152 env[1816]: time="2025-03-17T18:20:32.192080996Z" level=info msg="TearDown network for sandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\" successfully" Mar 17 18:20:32.199535 env[1816]: time="2025-03-17T18:20:32.199423238Z" level=info msg="RemovePodSandbox \"f61d914064d2a91158c34e7da174e633df2b56fdc9b43c4e15fd6a9ff17231cb\" returns successfully" Mar 17 18:20:32.713692 kubelet[2815]: I0317 18:20:32.713626 2815 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:20:32.746566 kubelet[2815]: I0317 18:20:32.746406 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-5w4cr" podStartSLOduration=36.844458813 podStartE2EDuration="46.74636011s" podCreationTimestamp="2025-03-17 18:19:46 +0000 UTC" firstStartedPulling="2025-03-17 18:20:21.193609957 +0000 UTC m=+52.187610324" lastFinishedPulling="2025-03-17 18:20:31.095511254 +0000 UTC m=+62.089511621" observedRunningTime="2025-03-17 18:20:31.779951151 +0000 UTC m=+62.773951542" watchObservedRunningTime="2025-03-17 18:20:32.74636011 +0000 UTC m=+63.740360501" Mar 17 18:20:32.746821 kubelet[2815]: I0317 18:20:32.746605 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-58f8c8bbc6-s9n4g" podStartSLOduration=36.573527461 podStartE2EDuration="46.746595241s" podCreationTimestamp="2025-03-17 18:19:46 +0000 UTC" firstStartedPulling="2025-03-17 18:20:21.319193498 +0000 UTC m=+52.313193865" lastFinishedPulling="2025-03-17 18:20:31.49226129 +0000 UTC m=+62.486261645" observedRunningTime="2025-03-17 18:20:32.745818691 +0000 UTC m=+63.739819082" watchObservedRunningTime="2025-03-17 18:20:32.746595241 +0000 UTC m=+63.740595632" Mar 17 18:20:32.784000 audit[5342]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=5342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:32.784000 audit[5342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc6da7470 a2=0 a3=1 items=0 ppid=2993 pid=5342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:32.784000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:32.792000 audit[5342]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:32.792000 audit[5342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc6da7470 a2=0 a3=1 items=0 ppid=2993 pid=5342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:32.792000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:33.533020 env[1816]: time="2025-03-17T18:20:33.532963612Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:33.543564 env[1816]: time="2025-03-17T18:20:33.543492815Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3eb557f7694f230afd24a75a691bcda4c0a7bfe87a981386dcd4ecf2b0701349,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:33.546976 env[1816]: time="2025-03-17T18:20:33.546926184Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:33.553020 env[1816]: time="2025-03-17T18:20:33.552963946Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:a338da9488cbaa83c78457c3d7354d84149969c0480e88dd768e036632ff5b76,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Mar 17 18:20:33.554180 env[1816]: time="2025-03-17T18:20:33.554129759Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.29.1\" returns image reference \"sha256:3eb557f7694f230afd24a75a691bcda4c0a7bfe87a981386dcd4ecf2b0701349\"" Mar 17 18:20:33.559762 env[1816]: time="2025-03-17T18:20:33.559706374Z" level=info msg="CreateContainer within sandbox \"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Mar 17 18:20:33.591054 env[1816]: time="2025-03-17T18:20:33.590978179Z" level=info msg="CreateContainer within sandbox \"724fde17c8fb24a61558983dd82523264c229bd8eaf2496a474f7b840ba6e270\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"1bd400b27fa7071980f50c8a61a93175e6471a076107ff7b974b19bb8927308b\"" Mar 17 18:20:33.592327 env[1816]: time="2025-03-17T18:20:33.592264197Z" level=info msg="StartContainer for \"1bd400b27fa7071980f50c8a61a93175e6471a076107ff7b974b19bb8927308b\"" Mar 17 18:20:33.647453 systemd[1]: Started cri-containerd-1bd400b27fa7071980f50c8a61a93175e6471a076107ff7b974b19bb8927308b.scope. Mar 17 18:20:33.679512 systemd[1]: run-containerd-runc-k8s.io-1bd400b27fa7071980f50c8a61a93175e6471a076107ff7b974b19bb8927308b-runc.uZN612.mount: Deactivated successfully. Mar 17 18:20:33.732789 kubelet[2815]: I0317 18:20:33.732714 2815 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4379 pid=5352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:33.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162643430306232376661373037313938306635306338613631613933 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit: BPF prog-id=208 op=LOAD Mar 17 18:20:33.787000 audit[5352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4379 pid=5352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:33.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162643430306232376661373037313938306635306338613631613933 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.787000 audit: BPF prog-id=209 op=LOAD Mar 17 18:20:33.787000 audit[5352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4379 pid=5352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:33.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162643430306232376661373037313938306635306338613631613933 Mar 17 18:20:33.788000 audit: BPF prog-id=209 op=UNLOAD Mar 17 18:20:33.788000 audit: BPF prog-id=208 op=UNLOAD Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { perfmon } for pid=5352 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit[5352]: AVC avc: denied { bpf } for pid=5352 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:20:33.788000 audit: BPF prog-id=210 op=LOAD Mar 17 18:20:33.788000 audit[5352]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4379 pid=5352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:33.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162643430306232376661373037313938306635306338613631613933 Mar 17 18:20:33.830431 env[1816]: time="2025-03-17T18:20:33.830370063Z" level=info msg="StartContainer for \"1bd400b27fa7071980f50c8a61a93175e6471a076107ff7b974b19bb8927308b\" returns successfully" Mar 17 18:20:34.432772 kubelet[2815]: I0317 18:20:34.432698 2815 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Mar 17 18:20:34.432772 kubelet[2815]: I0317 18:20:34.432776 2815 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Mar 17 18:20:34.699662 systemd[1]: Started sshd@10-172.31.25.97:22-139.178.89.65:59872.service. Mar 17 18:20:34.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.97:22-139.178.89.65:59872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:34.705371 kernel: kauditd_printk_skb: 182 callbacks suppressed Mar 17 18:20:34.705503 kernel: audit: type=1130 audit(1742235634.702:1385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.97:22-139.178.89.65:59872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:34.914060 sshd[5383]: Accepted publickey for core from 139.178.89.65 port 59872 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:34.912000 audit[5383]: USER_ACCT pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:34.923000 audit[5383]: CRED_ACQ pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:34.934544 kernel: audit: type=1101 audit(1742235634.912:1386): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:34.934709 kernel: audit: type=1103 audit(1742235634.923:1387): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:34.935164 sshd[5383]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:34.941478 kernel: audit: type=1006 audit(1742235634.923:1388): pid=5383 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Mar 17 18:20:34.923000 audit[5383]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1f6cc10 a2=3 a3=1 items=0 ppid=1 pid=5383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:34.952350 kernel: audit: type=1300 audit(1742235634.923:1388): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1f6cc10 a2=3 a3=1 items=0 ppid=1 pid=5383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:34.923000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:34.961278 kernel: audit: type=1327 audit(1742235634.923:1388): proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:34.961730 systemd-logind[1810]: New session 11 of user core. Mar 17 18:20:34.974261 systemd[1]: Started session-11.scope. Mar 17 18:20:34.991000 audit[5383]: USER_START pid=5383 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.003000 audit[5385]: CRED_ACQ pid=5385 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.005446 kernel: audit: type=1105 audit(1742235634.991:1389): pid=5383 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.020249 kernel: audit: type=1103 audit(1742235635.003:1390): pid=5385 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.024000 audit[5269]: AVC avc: denied { watch } for pid=5269 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.147743412/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c186,c511 tclass=file permissive=0 Mar 17 18:20:35.024000 audit[5269]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40018222c0 a2=fc6 a3=0 items=0 ppid=4768 pid=5269 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 key=(null) Mar 17 18:20:35.039490 kernel: audit: type=1400 audit(1742235635.024:1391): avc: denied { watch } for pid=5269 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.147743412/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c186,c511 tclass=file permissive=0 Mar 17 18:20:35.024000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:20:35.052405 kernel: audit: type=1300 audit(1742235635.024:1391): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40018222c0 a2=fc6 a3=0 items=0 ppid=4768 pid=5269 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 key=(null) Mar 17 18:20:35.084000 audit[5201]: AVC avc: denied { watch } for pid=5201 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.1514046198/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c430 tclass=file permissive=0 Mar 17 18:20:35.084000 audit[5201]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000338e80 a2=fc6 a3=0 items=0 ppid=4719 pid=5201 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 key=(null) Mar 17 18:20:35.084000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:20:35.271345 sshd[5383]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:35.274000 audit[5383]: USER_END pid=5383 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.275000 audit[5383]: CRED_DISP pid=5383 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.279326 systemd[1]: session-11.scope: Deactivated successfully. Mar 17 18:20:35.279401 systemd-logind[1810]: Session 11 logged out. Waiting for processes to exit. Mar 17 18:20:35.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.97:22-139.178.89.65:59872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:35.280542 systemd[1]: sshd@10-172.31.25.97:22-139.178.89.65:59872.service: Deactivated successfully. Mar 17 18:20:35.283355 systemd-logind[1810]: Removed session 11. Mar 17 18:20:35.301664 systemd[1]: Started sshd@11-172.31.25.97:22-139.178.89.65:59884.service. Mar 17 18:20:35.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.97:22-139.178.89.65:59884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:35.482000 audit[5395]: USER_ACCT pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.484378 sshd[5395]: Accepted publickey for core from 139.178.89.65 port 59884 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:35.485000 audit[5395]: CRED_ACQ pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.485000 audit[5395]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcef9a670 a2=3 a3=1 items=0 ppid=1 pid=5395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:35.485000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:35.487680 sshd[5395]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:35.496656 systemd-logind[1810]: New session 12 of user core. Mar 17 18:20:35.497357 systemd[1]: Started session-12.scope. Mar 17 18:20:35.505000 audit[5395]: USER_START pid=5395 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.510000 audit[5397]: CRED_ACQ pid=5397 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.825553 sshd[5395]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:35.827000 audit[5395]: USER_END pid=5395 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.827000 audit[5395]: CRED_DISP pid=5395 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:35.831241 systemd[1]: sshd@11-172.31.25.97:22-139.178.89.65:59884.service: Deactivated successfully. Mar 17 18:20:35.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.97:22-139.178.89.65:59884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:35.832751 systemd[1]: session-12.scope: Deactivated successfully. Mar 17 18:20:35.834445 systemd-logind[1810]: Session 12 logged out. Waiting for processes to exit. Mar 17 18:20:35.836999 systemd-logind[1810]: Removed session 12. Mar 17 18:20:35.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.97:22-139.178.89.65:59896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:35.855737 systemd[1]: Started sshd@12-172.31.25.97:22-139.178.89.65:59896.service. Mar 17 18:20:36.037000 audit[5404]: USER_ACCT pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:36.039448 sshd[5404]: Accepted publickey for core from 139.178.89.65 port 59896 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:36.040000 audit[5404]: CRED_ACQ pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:36.040000 audit[5404]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf3b9130 a2=3 a3=1 items=0 ppid=1 pid=5404 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:36.040000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:36.041606 sshd[5404]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:36.049325 systemd-logind[1810]: New session 13 of user core. Mar 17 18:20:36.051100 systemd[1]: Started session-13.scope. Mar 17 18:20:36.061000 audit[5404]: USER_START pid=5404 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:36.064000 audit[5408]: CRED_ACQ pid=5408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:36.327658 sshd[5404]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:36.329000 audit[5404]: USER_END pid=5404 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:36.330000 audit[5404]: CRED_DISP pid=5404 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:36.333840 systemd-logind[1810]: Session 13 logged out. Waiting for processes to exit. Mar 17 18:20:36.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.97:22-139.178.89.65:59896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:36.335418 systemd[1]: session-13.scope: Deactivated successfully. Mar 17 18:20:36.336531 systemd[1]: sshd@12-172.31.25.97:22-139.178.89.65:59896.service: Deactivated successfully. Mar 17 18:20:36.338996 systemd-logind[1810]: Removed session 13. Mar 17 18:20:41.367112 kernel: kauditd_printk_skb: 29 callbacks suppressed Mar 17 18:20:41.367323 kernel: audit: type=1130 audit(1742235641.355:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.97:22-139.178.89.65:41500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:41.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.97:22-139.178.89.65:41500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:41.355993 systemd[1]: Started sshd@13-172.31.25.97:22-139.178.89.65:41500.service. Mar 17 18:20:41.536000 audit[5427]: USER_ACCT pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.542118 sshd[5427]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:41.543025 sshd[5427]: Accepted publickey for core from 139.178.89.65 port 41500 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:41.538000 audit[5427]: CRED_ACQ pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.556442 kernel: audit: type=1101 audit(1742235641.536:1415): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.556543 kernel: audit: type=1103 audit(1742235641.538:1416): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.562299 kernel: audit: type=1006 audit(1742235641.538:1417): pid=5427 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Mar 17 18:20:41.538000 audit[5427]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc99f9b60 a2=3 a3=1 items=0 ppid=1 pid=5427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:41.572078 kernel: audit: type=1300 audit(1742235641.538:1417): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc99f9b60 a2=3 a3=1 items=0 ppid=1 pid=5427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:41.538000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:41.575987 kernel: audit: type=1327 audit(1742235641.538:1417): proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:41.580932 systemd-logind[1810]: New session 14 of user core. Mar 17 18:20:41.581256 systemd[1]: Started session-14.scope. Mar 17 18:20:41.590000 audit[5427]: USER_START pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.593000 audit[5429]: CRED_ACQ pid=5429 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.611023 kernel: audit: type=1105 audit(1742235641.590:1418): pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.611108 kernel: audit: type=1103 audit(1742235641.593:1419): pid=5429 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.845187 sshd[5427]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:41.845000 audit[5427]: USER_END pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.845000 audit[5427]: CRED_DISP pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.858975 systemd[1]: sshd@13-172.31.25.97:22-139.178.89.65:41500.service: Deactivated successfully. Mar 17 18:20:41.861636 systemd[1]: session-14.scope: Deactivated successfully. Mar 17 18:20:41.863627 systemd-logind[1810]: Session 14 logged out. Waiting for processes to exit. Mar 17 18:20:41.865654 systemd-logind[1810]: Removed session 14. Mar 17 18:20:41.866561 kernel: audit: type=1106 audit(1742235641.845:1420): pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.866848 kernel: audit: type=1104 audit(1742235641.845:1421): pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:41.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.97:22-139.178.89.65:41500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:46.875291 systemd[1]: Started sshd@14-172.31.25.97:22-139.178.89.65:41508.service. Mar 17 18:20:46.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.97:22-139.178.89.65:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:46.878800 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:20:46.878926 kernel: audit: type=1130 audit(1742235646.875:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.97:22-139.178.89.65:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:47.080550 sshd[5464]: Accepted publickey for core from 139.178.89.65 port 41508 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:47.079000 audit[5464]: USER_ACCT pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.089000 audit[5464]: CRED_ACQ pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.101303 kernel: audit: type=1101 audit(1742235647.079:1424): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.101461 kernel: audit: type=1103 audit(1742235647.089:1425): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.102138 sshd[5464]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:47.107466 kernel: audit: type=1006 audit(1742235647.090:1426): pid=5464 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Mar 17 18:20:47.090000 audit[5464]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff964de00 a2=3 a3=1 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:47.118593 kernel: audit: type=1300 audit(1742235647.090:1426): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff964de00 a2=3 a3=1 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:47.119819 kernel: audit: type=1327 audit(1742235647.090:1426): proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:47.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:47.126838 systemd-logind[1810]: New session 15 of user core. Mar 17 18:20:47.128629 systemd[1]: Started session-15.scope. Mar 17 18:20:47.140000 audit[5464]: USER_START pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.143000 audit[5466]: CRED_ACQ pid=5466 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.155556 kernel: audit: type=1105 audit(1742235647.140:1427): pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.165261 kernel: audit: type=1103 audit(1742235647.143:1428): pid=5466 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.473059 sshd[5464]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:47.474000 audit[5464]: USER_END pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.487412 systemd[1]: sshd@14-172.31.25.97:22-139.178.89.65:41508.service: Deactivated successfully. Mar 17 18:20:47.488800 systemd[1]: session-15.scope: Deactivated successfully. Mar 17 18:20:47.474000 audit[5464]: CRED_DISP pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.498239 kernel: audit: type=1106 audit(1742235647.474:1429): pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.498398 kernel: audit: type=1104 audit(1742235647.474:1430): pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:47.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.97:22-139.178.89.65:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:47.498824 systemd-logind[1810]: Session 15 logged out. Waiting for processes to exit. Mar 17 18:20:47.501259 systemd-logind[1810]: Removed session 15. Mar 17 18:20:52.503896 systemd[1]: Started sshd@15-172.31.25.97:22-139.178.89.65:47216.service. Mar 17 18:20:52.514504 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:20:52.514623 kernel: audit: type=1130 audit(1742235652.503:1432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.97:22-139.178.89.65:47216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:52.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.97:22-139.178.89.65:47216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:52.680000 audit[5480]: USER_ACCT pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.691827 sshd[5480]: Accepted publickey for core from 139.178.89.65 port 47216 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:52.692352 kernel: audit: type=1101 audit(1742235652.680:1433): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.691000 audit[5480]: CRED_ACQ pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.693866 sshd[5480]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:52.707264 kernel: audit: type=1103 audit(1742235652.691:1434): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.707427 kernel: audit: type=1006 audit(1742235652.691:1435): pid=5480 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Mar 17 18:20:52.691000 audit[5480]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea3c9370 a2=3 a3=1 items=0 ppid=1 pid=5480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:52.716930 kernel: audit: type=1300 audit(1742235652.691:1435): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea3c9370 a2=3 a3=1 items=0 ppid=1 pid=5480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:52.691000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:52.720705 kernel: audit: type=1327 audit(1742235652.691:1435): proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:52.725048 systemd-logind[1810]: New session 16 of user core. Mar 17 18:20:52.726120 systemd[1]: Started session-16.scope. Mar 17 18:20:52.735000 audit[5480]: USER_START pid=5480 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.735000 audit[5482]: CRED_ACQ pid=5482 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.755551 kernel: audit: type=1105 audit(1742235652.735:1436): pid=5480 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.755705 kernel: audit: type=1103 audit(1742235652.735:1437): pid=5482 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:52.906460 kubelet[2815]: I0317 18:20:52.905874 2815 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:20:52.948723 kubelet[2815]: I0317 18:20:52.948599 2815 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-2l2mt" podStartSLOduration=50.771646907 podStartE2EDuration="1m4.948546281s" podCreationTimestamp="2025-03-17 18:19:48 +0000 UTC" firstStartedPulling="2025-03-17 18:20:19.379640079 +0000 UTC m=+50.373640446" lastFinishedPulling="2025-03-17 18:20:33.556539465 +0000 UTC m=+64.550539820" observedRunningTime="2025-03-17 18:20:34.781403305 +0000 UTC m=+65.775403684" watchObservedRunningTime="2025-03-17 18:20:52.948546281 +0000 UTC m=+83.942546648" Mar 17 18:20:52.991000 audit[5493]: NETFILTER_CFG table=filter:117 family=2 entries=9 op=nft_register_rule pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:52.991000 audit[5493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe72d3ab0 a2=0 a3=1 items=0 ppid=2993 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:53.009646 kernel: audit: type=1325 audit(1742235652.991:1438): table=filter:117 family=2 entries=9 op=nft_register_rule pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:53.011256 kernel: audit: type=1300 audit(1742235652.991:1438): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe72d3ab0 a2=0 a3=1 items=0 ppid=2993 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:52.991000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:53.021000 audit[5493]: NETFILTER_CFG table=nat:118 family=2 entries=27 op=nft_register_chain pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:53.021000 audit[5493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffe72d3ab0 a2=0 a3=1 items=0 ppid=2993 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:53.021000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:53.043555 sshd[5480]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:53.045000 audit[5480]: USER_END pid=5480 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:53.045000 audit[5480]: CRED_DISP pid=5480 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:53.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.97:22-139.178.89.65:47216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:53.048988 systemd-logind[1810]: Session 16 logged out. Waiting for processes to exit. Mar 17 18:20:53.049500 systemd[1]: sshd@15-172.31.25.97:22-139.178.89.65:47216.service: Deactivated successfully. Mar 17 18:20:53.052259 systemd[1]: session-16.scope: Deactivated successfully. Mar 17 18:20:53.054188 systemd-logind[1810]: Removed session 16. Mar 17 18:20:53.677791 systemd[1]: run-containerd-runc-k8s.io-1059e96a433f85906ac4dc905754eca199c3999c2bab70193df93ff5287cc3b3-runc.tmBmx8.mount: Deactivated successfully. Mar 17 18:20:53.941944 systemd[1]: run-containerd-runc-k8s.io-1059e96a433f85906ac4dc905754eca199c3999c2bab70193df93ff5287cc3b3-runc.GjzPzD.mount: Deactivated successfully. Mar 17 18:20:57.970707 kubelet[2815]: I0317 18:20:57.970647 2815 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Mar 17 18:20:58.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.97:22-139.178.89.65:47218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:58.075013 systemd[1]: Started sshd@16-172.31.25.97:22-139.178.89.65:47218.service. Mar 17 18:20:58.079810 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:20:58.079950 kernel: audit: type=1130 audit(1742235658.074:1443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.97:22-139.178.89.65:47218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:58.112000 audit[5536]: NETFILTER_CFG table=filter:119 family=2 entries=8 op=nft_register_rule pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:58.121255 kernel: audit: type=1325 audit(1742235658.112:1444): table=filter:119 family=2 entries=8 op=nft_register_rule pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:58.112000 audit[5536]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd8aa1970 a2=0 a3=1 items=0 ppid=2993 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:58.112000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:58.147338 kernel: audit: type=1300 audit(1742235658.112:1444): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd8aa1970 a2=0 a3=1 items=0 ppid=2993 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:58.147474 kernel: audit: type=1327 audit(1742235658.112:1444): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:58.158000 audit[5536]: NETFILTER_CFG table=nat:120 family=2 entries=34 op=nft_register_chain pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:58.158000 audit[5536]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffd8aa1970 a2=0 a3=1 items=0 ppid=2993 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:58.181694 kernel: audit: type=1325 audit(1742235658.158:1445): table=nat:120 family=2 entries=34 op=nft_register_chain pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:20:58.181853 kernel: audit: type=1300 audit(1742235658.158:1445): arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffd8aa1970 a2=0 a3=1 items=0 ppid=2993 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:58.158000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:58.190449 kernel: audit: type=1327 audit(1742235658.158:1445): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:20:58.299000 audit[5535]: USER_ACCT pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.304179 sshd[5535]: Accepted publickey for core from 139.178.89.65 port 47218 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:58.312307 kernel: audit: type=1101 audit(1742235658.299:1446): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.311000 audit[5535]: CRED_ACQ pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.314302 sshd[5535]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:58.327510 kernel: audit: type=1103 audit(1742235658.311:1447): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.327716 kernel: audit: type=1006 audit(1742235658.311:1448): pid=5535 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Mar 17 18:20:58.311000 audit[5535]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebe474c0 a2=3 a3=1 items=0 ppid=1 pid=5535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:58.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:58.335153 systemd-logind[1810]: New session 17 of user core. Mar 17 18:20:58.336398 systemd[1]: Started session-17.scope. Mar 17 18:20:58.345000 audit[5535]: USER_START pid=5535 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.348000 audit[5538]: CRED_ACQ pid=5538 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.609653 sshd[5535]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:58.610000 audit[5535]: USER_END pid=5535 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.611000 audit[5535]: CRED_DISP pid=5535 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.97:22-139.178.89.65:47218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:58.615563 systemd[1]: sshd@16-172.31.25.97:22-139.178.89.65:47218.service: Deactivated successfully. Mar 17 18:20:58.616939 systemd[1]: session-17.scope: Deactivated successfully. Mar 17 18:20:58.619264 systemd-logind[1810]: Session 17 logged out. Waiting for processes to exit. Mar 17 18:20:58.621882 systemd-logind[1810]: Removed session 17. Mar 17 18:20:58.640857 systemd[1]: Started sshd@17-172.31.25.97:22-139.178.89.65:47222.service. Mar 17 18:20:58.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.97:22-139.178.89.65:47222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:58.821000 audit[5548]: USER_ACCT pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.822937 sshd[5548]: Accepted publickey for core from 139.178.89.65 port 47222 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:58.824000 audit[5548]: CRED_ACQ pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.824000 audit[5548]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3ed42b0 a2=3 a3=1 items=0 ppid=1 pid=5548 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:58.824000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:58.826195 sshd[5548]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:58.835825 systemd-logind[1810]: New session 18 of user core. Mar 17 18:20:58.838326 systemd[1]: Started session-18.scope. Mar 17 18:20:58.850000 audit[5548]: USER_START pid=5548 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:58.853000 audit[5550]: CRED_ACQ pid=5550 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:59.402348 sshd[5548]: pam_unix(sshd:session): session closed for user core Mar 17 18:20:59.403000 audit[5548]: USER_END pid=5548 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:59.404000 audit[5548]: CRED_DISP pid=5548 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:59.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.97:22-139.178.89.65:47222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:59.408504 systemd[1]: sshd@17-172.31.25.97:22-139.178.89.65:47222.service: Deactivated successfully. Mar 17 18:20:59.409898 systemd[1]: session-18.scope: Deactivated successfully. Mar 17 18:20:59.412290 systemd-logind[1810]: Session 18 logged out. Waiting for processes to exit. Mar 17 18:20:59.415048 systemd-logind[1810]: Removed session 18. Mar 17 18:20:59.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.97:22-139.178.89.65:47230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:20:59.432401 systemd[1]: Started sshd@18-172.31.25.97:22-139.178.89.65:47230.service. Mar 17 18:20:59.644000 audit[5558]: USER_ACCT pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:59.645684 sshd[5558]: Accepted publickey for core from 139.178.89.65 port 47230 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:20:59.648324 sshd[5558]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:20:59.646000 audit[5558]: CRED_ACQ pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:59.646000 audit[5558]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca007ec0 a2=3 a3=1 items=0 ppid=1 pid=5558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:20:59.646000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:20:59.657929 systemd-logind[1810]: New session 19 of user core. Mar 17 18:20:59.659721 systemd[1]: Started session-19.scope. Mar 17 18:20:59.670000 audit[5558]: USER_START pid=5558 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:20:59.673000 audit[5560]: CRED_ACQ pid=5560 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.069000 audit[5576]: NETFILTER_CFG table=filter:121 family=2 entries=20 op=nft_register_rule pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:21:01.069000 audit[5576]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd6319000 a2=0 a3=1 items=0 ppid=2993 pid=5576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:01.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:21:01.078000 audit[5576]: NETFILTER_CFG table=nat:122 family=2 entries=22 op=nft_register_rule pid=5576 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:21:01.078000 audit[5576]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd6319000 a2=0 a3=1 items=0 ppid=2993 pid=5576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:01.078000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:21:01.116000 audit[5578]: NETFILTER_CFG table=filter:123 family=2 entries=32 op=nft_register_rule pid=5578 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:21:01.121375 sshd[5558]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:01.122000 audit[5558]: USER_END pid=5558 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.122000 audit[5558]: CRED_DISP pid=5558 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.127269 systemd-logind[1810]: Session 19 logged out. Waiting for processes to exit. Mar 17 18:21:01.129432 systemd[1]: sshd@18-172.31.25.97:22-139.178.89.65:47230.service: Deactivated successfully. Mar 17 18:21:01.130856 systemd[1]: session-19.scope: Deactivated successfully. Mar 17 18:21:01.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.97:22-139.178.89.65:47230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:01.133590 systemd-logind[1810]: Removed session 19. Mar 17 18:21:01.150026 systemd[1]: Started sshd@19-172.31.25.97:22-139.178.89.65:42534.service. Mar 17 18:21:01.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.97:22-139.178.89.65:42534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:01.116000 audit[5578]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd7736190 a2=0 a3=1 items=0 ppid=2993 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:01.116000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:21:01.159000 audit[5578]: NETFILTER_CFG table=nat:124 family=2 entries=22 op=nft_register_rule pid=5578 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:21:01.159000 audit[5578]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd7736190 a2=0 a3=1 items=0 ppid=2993 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:01.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:21:01.338000 audit[5581]: USER_ACCT pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.340479 sshd[5581]: Accepted publickey for core from 139.178.89.65 port 42534 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:01.341000 audit[5581]: CRED_ACQ pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.342000 audit[5581]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedfef7a0 a2=3 a3=1 items=0 ppid=1 pid=5581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:01.342000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:01.344198 sshd[5581]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:01.352319 systemd-logind[1810]: New session 20 of user core. Mar 17 18:21:01.354230 systemd[1]: Started session-20.scope. Mar 17 18:21:01.368000 audit[5581]: USER_START pid=5581 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.371000 audit[5585]: CRED_ACQ pid=5585 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.922661 sshd[5581]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:01.923000 audit[5581]: USER_END pid=5581 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.923000 audit[5581]: CRED_DISP pid=5581 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:01.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.97:22-139.178.89.65:42534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:01.928502 systemd[1]: sshd@19-172.31.25.97:22-139.178.89.65:42534.service: Deactivated successfully. Mar 17 18:21:01.929929 systemd[1]: session-20.scope: Deactivated successfully. Mar 17 18:21:01.931828 systemd-logind[1810]: Session 20 logged out. Waiting for processes to exit. Mar 17 18:21:01.934419 systemd-logind[1810]: Removed session 20. Mar 17 18:21:01.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.97:22-139.178.89.65:42548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:01.954674 systemd[1]: Started sshd@20-172.31.25.97:22-139.178.89.65:42548.service. Mar 17 18:21:02.126000 audit[5593]: USER_ACCT pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:02.127961 sshd[5593]: Accepted publickey for core from 139.178.89.65 port 42548 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:02.129000 audit[5593]: CRED_ACQ pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:02.129000 audit[5593]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc10945a0 a2=3 a3=1 items=0 ppid=1 pid=5593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:02.129000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:02.132286 sshd[5593]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:02.141835 systemd[1]: Started session-21.scope. Mar 17 18:21:02.142303 systemd-logind[1810]: New session 21 of user core. Mar 17 18:21:02.151000 audit[5593]: USER_START pid=5593 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:02.154000 audit[5595]: CRED_ACQ pid=5595 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:02.410528 sshd[5593]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:02.411000 audit[5593]: USER_END pid=5593 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:02.411000 audit[5593]: CRED_DISP pid=5593 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:02.415253 systemd[1]: sshd@20-172.31.25.97:22-139.178.89.65:42548.service: Deactivated successfully. Mar 17 18:21:02.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.97:22-139.178.89.65:42548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:02.416762 systemd[1]: session-21.scope: Deactivated successfully. Mar 17 18:21:02.417921 systemd-logind[1810]: Session 21 logged out. Waiting for processes to exit. Mar 17 18:21:02.419399 systemd-logind[1810]: Removed session 21. Mar 17 18:21:07.440261 systemd[1]: Started sshd@21-172.31.25.97:22-139.178.89.65:42554.service. Mar 17 18:21:07.453078 kernel: kauditd_printk_skb: 63 callbacks suppressed Mar 17 18:21:07.453293 kernel: audit: type=1130 audit(1742235667.439:1494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.97:22-139.178.89.65:42554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:07.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.97:22-139.178.89.65:42554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:07.613000 audit[5606]: USER_ACCT pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.615502 sshd[5606]: Accepted publickey for core from 139.178.89.65 port 42554 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:07.618679 sshd[5606]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:07.616000 audit[5606]: CRED_ACQ pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.633234 kernel: audit: type=1101 audit(1742235667.613:1495): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.633374 kernel: audit: type=1103 audit(1742235667.616:1496): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.641386 kernel: audit: type=1006 audit(1742235667.616:1497): pid=5606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Mar 17 18:21:07.616000 audit[5606]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe20955d0 a2=3 a3=1 items=0 ppid=1 pid=5606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:07.651796 kernel: audit: type=1300 audit(1742235667.616:1497): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe20955d0 a2=3 a3=1 items=0 ppid=1 pid=5606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:07.616000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:07.655451 kernel: audit: type=1327 audit(1742235667.616:1497): proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:07.657100 systemd-logind[1810]: New session 22 of user core. Mar 17 18:21:07.659738 systemd[1]: Started session-22.scope. Mar 17 18:21:07.668000 audit[5606]: USER_START pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.681280 kernel: audit: type=1105 audit(1742235667.668:1498): pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.680000 audit[5608]: CRED_ACQ pid=5608 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.696267 kernel: audit: type=1103 audit(1742235667.680:1499): pid=5608 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.914588 sshd[5606]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:07.915000 audit[5606]: USER_END pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.919082 systemd[1]: session-22.scope: Deactivated successfully. Mar 17 18:21:07.920302 systemd[1]: sshd@21-172.31.25.97:22-139.178.89.65:42554.service: Deactivated successfully. Mar 17 18:21:07.915000 audit[5606]: CRED_DISP pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.936979 kernel: audit: type=1106 audit(1742235667.915:1500): pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.937102 kernel: audit: type=1104 audit(1742235667.915:1501): pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:07.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.97:22-139.178.89.65:42554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:07.937648 systemd-logind[1810]: Session 22 logged out. Waiting for processes to exit. Mar 17 18:21:07.939404 systemd-logind[1810]: Removed session 22. Mar 17 18:21:09.623000 audit[5619]: NETFILTER_CFG table=filter:125 family=2 entries=20 op=nft_register_rule pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:21:09.623000 audit[5619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffd96f1d0 a2=0 a3=1 items=0 ppid=2993 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:09.623000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:21:09.633000 audit[5619]: NETFILTER_CFG table=nat:126 family=2 entries=106 op=nft_register_chain pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Mar 17 18:21:09.633000 audit[5619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=fffffd96f1d0 a2=0 a3=1 items=0 ppid=2993 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:09.633000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Mar 17 18:21:12.956035 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:21:12.957504 kernel: audit: type=1130 audit(1742235672.944:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.97:22-139.178.89.65:40138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:12.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.97:22-139.178.89.65:40138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:12.945812 systemd[1]: Started sshd@22-172.31.25.97:22-139.178.89.65:40138.service. Mar 17 18:21:13.124000 audit[5621]: USER_ACCT pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.128547 sshd[5621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:13.129823 sshd[5621]: Accepted publickey for core from 139.178.89.65 port 40138 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:13.136243 kernel: audit: type=1101 audit(1742235673.124:1506): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.136363 kernel: audit: type=1103 audit(1742235673.126:1507): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.126000 audit[5621]: CRED_ACQ pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.151527 kernel: audit: type=1006 audit(1742235673.126:1508): pid=5621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Mar 17 18:21:13.126000 audit[5621]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1de5fb0 a2=3 a3=1 items=0 ppid=1 pid=5621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:13.161418 kernel: audit: type=1300 audit(1742235673.126:1508): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1de5fb0 a2=3 a3=1 items=0 ppid=1 pid=5621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:13.126000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:13.165633 kernel: audit: type=1327 audit(1742235673.126:1508): proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:13.168337 systemd-logind[1810]: New session 23 of user core. Mar 17 18:21:13.172783 systemd[1]: Started session-23.scope. Mar 17 18:21:13.184000 audit[5621]: USER_START pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.196000 audit[5623]: CRED_ACQ pid=5623 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.205982 kernel: audit: type=1105 audit(1742235673.184:1509): pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.206113 kernel: audit: type=1103 audit(1742235673.196:1510): pid=5623 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.443630 sshd[5621]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:13.445000 audit[5621]: USER_END pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.447000 audit[5621]: CRED_DISP pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.458088 systemd[1]: sshd@22-172.31.25.97:22-139.178.89.65:40138.service: Deactivated successfully. Mar 17 18:21:13.459831 systemd[1]: session-23.scope: Deactivated successfully. Mar 17 18:21:13.465850 kernel: audit: type=1106 audit(1742235673.445:1511): pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.465939 kernel: audit: type=1104 audit(1742235673.447:1512): pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:13.467263 systemd-logind[1810]: Session 23 logged out. Waiting for processes to exit. Mar 17 18:21:13.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.97:22-139.178.89.65:40138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:13.469386 systemd-logind[1810]: Removed session 23. Mar 17 18:21:18.473527 systemd[1]: Started sshd@23-172.31.25.97:22-139.178.89.65:40148.service. Mar 17 18:21:18.485067 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:21:18.485124 kernel: audit: type=1130 audit(1742235678.473:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.97:22-139.178.89.65:40148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:18.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.97:22-139.178.89.65:40148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:18.654000 audit[5654]: USER_ACCT pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:18.659462 sshd[5654]: Accepted publickey for core from 139.178.89.65 port 40148 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:18.665000 audit[5654]: CRED_ACQ pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:18.668405 sshd[5654]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:18.676133 kernel: audit: type=1101 audit(1742235678.654:1515): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:18.676319 kernel: audit: type=1103 audit(1742235678.665:1516): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:18.678440 kernel: audit: type=1006 audit(1742235678.665:1517): pid=5654 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Mar 17 18:21:18.665000 audit[5654]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa9e0530 a2=3 a3=1 items=0 ppid=1 pid=5654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:18.692460 kernel: audit: type=1300 audit(1742235678.665:1517): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa9e0530 a2=3 a3=1 items=0 ppid=1 pid=5654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:18.665000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:18.697714 kernel: audit: type=1327 audit(1742235678.665:1517): proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:18.699510 systemd-logind[1810]: New session 24 of user core. Mar 17 18:21:18.702683 systemd[1]: Started session-24.scope. Mar 17 18:21:18.718000 audit[5654]: USER_START pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:18.723000 audit[5656]: CRED_ACQ pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:18.740025 kernel: audit: type=1105 audit(1742235678.718:1518): pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:18.740178 kernel: audit: type=1103 audit(1742235678.723:1519): pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:19.000631 sshd[5654]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:19.001000 audit[5654]: USER_END pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:19.005712 systemd[1]: session-24.scope: Deactivated successfully. Mar 17 18:21:19.007314 systemd[1]: sshd@23-172.31.25.97:22-139.178.89.65:40148.service: Deactivated successfully. Mar 17 18:21:19.014545 systemd-logind[1810]: Session 24 logged out. Waiting for processes to exit. Mar 17 18:21:19.016016 systemd-logind[1810]: Removed session 24. Mar 17 18:21:19.002000 audit[5654]: CRED_DISP pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:19.025047 kernel: audit: type=1106 audit(1742235679.001:1520): pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:19.025330 kernel: audit: type=1104 audit(1742235679.002:1521): pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:19.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.97:22-139.178.89.65:40148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:24.032679 systemd[1]: Started sshd@24-172.31.25.97:22-139.178.89.65:40210.service. Mar 17 18:21:24.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.97:22-139.178.89.65:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:24.036372 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:21:24.036532 kernel: audit: type=1130 audit(1742235684.032:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.97:22-139.178.89.65:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:24.225000 audit[5688]: USER_ACCT pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.231475 sshd[5688]: Accepted publickey for core from 139.178.89.65 port 40210 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:24.238258 kernel: audit: type=1101 audit(1742235684.225:1524): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.236000 audit[5688]: CRED_ACQ pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.239815 sshd[5688]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:24.255651 kernel: audit: type=1103 audit(1742235684.236:1525): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.255854 kernel: audit: type=1006 audit(1742235684.237:1526): pid=5688 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Mar 17 18:21:24.237000 audit[5688]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff8bcb70 a2=3 a3=1 items=0 ppid=1 pid=5688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:24.266145 kernel: audit: type=1300 audit(1742235684.237:1526): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff8bcb70 a2=3 a3=1 items=0 ppid=1 pid=5688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:24.237000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:24.270685 kernel: audit: type=1327 audit(1742235684.237:1526): proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:24.276509 systemd-logind[1810]: New session 25 of user core. Mar 17 18:21:24.278709 systemd[1]: Started session-25.scope. Mar 17 18:21:24.289000 audit[5688]: USER_START pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.304000 audit[5690]: CRED_ACQ pid=5690 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.321191 kernel: audit: type=1105 audit(1742235684.289:1527): pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.321389 kernel: audit: type=1103 audit(1742235684.304:1528): pid=5690 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.496000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:24.496000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001c829c0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:24.520973 kernel: audit: type=1400 audit(1742235684.496:1529): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:24.521302 kernel: audit: type=1300 audit(1742235684.496:1529): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001c829c0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:24.496000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:24.504000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:24.504000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001ffde60 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:24.504000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:24.593021 sshd[5688]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:24.594000 audit[5688]: USER_END pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.595000 audit[5688]: CRED_DISP pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:24.599748 systemd[1]: sshd@24-172.31.25.97:22-139.178.89.65:40210.service: Deactivated successfully. Mar 17 18:21:24.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.97:22-139.178.89.65:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:24.601859 systemd[1]: session-25.scope: Deactivated successfully. Mar 17 18:21:24.603926 systemd-logind[1810]: Session 25 logged out. Waiting for processes to exit. Mar 17 18:21:24.607583 systemd-logind[1810]: Removed session 25. Mar 17 18:21:25.323000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:25.323000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=40061055e0 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:21:25.323000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:21:25.324000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7339 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:25.324000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400509e060 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:21:25.324000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:21:25.338000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:25.338000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=40070c3b90 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:21:25.338000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:21:25.338000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:25.338000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=40070c3bf0 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:21:25.338000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:21:25.452000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:25.452000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4004461f80 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:21:25.452000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:21:25.452000 audit[2592]: AVC avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:25.452000 audit[2592]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4005af69e0 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) Mar 17 18:21:25.452000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Mar 17 18:21:29.622601 systemd[1]: Started sshd@25-172.31.25.97:22-139.178.89.65:40226.service. Mar 17 18:21:29.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.97:22-139.178.89.65:40226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:29.625098 kernel: kauditd_printk_skb: 25 callbacks suppressed Mar 17 18:21:29.625232 kernel: audit: type=1130 audit(1742235689.622:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.97:22-139.178.89.65:40226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:29.802000 audit[5703]: USER_ACCT pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.803957 sshd[5703]: Accepted publickey for core from 139.178.89.65 port 40226 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:29.814313 kernel: audit: type=1101 audit(1742235689.802:1541): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.816414 sshd[5703]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:29.814000 audit[5703]: CRED_ACQ pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.835146 systemd[1]: Started session-26.scope. Mar 17 18:21:29.838092 systemd-logind[1810]: New session 26 of user core. Mar 17 18:21:29.840377 kernel: audit: type=1103 audit(1742235689.814:1542): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.840477 kernel: audit: type=1006 audit(1742235689.814:1543): pid=5703 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Mar 17 18:21:29.814000 audit[5703]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6b57940 a2=3 a3=1 items=0 ppid=1 pid=5703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:29.854689 kernel: audit: type=1300 audit(1742235689.814:1543): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6b57940 a2=3 a3=1 items=0 ppid=1 pid=5703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:29.814000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:29.858706 kernel: audit: type=1327 audit(1742235689.814:1543): proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:29.847000 audit[5703]: USER_START pid=5703 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.868960 kernel: audit: type=1105 audit(1742235689.847:1544): pid=5703 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.854000 audit[5705]: CRED_ACQ pid=5705 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.879232 kernel: audit: type=1103 audit(1742235689.854:1545): pid=5705 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:29.889000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:29.889000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e21140 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:29.910166 kernel: audit: type=1400 audit(1742235689.889:1546): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:29.910380 kernel: audit: type=1300 audit(1742235689.889:1546): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e21140 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:29.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:29.889000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:29.889000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e21160 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:29.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:29.889000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:29.889000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e211a0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:29.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:29.903000 audit[2582]: AVC avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:29.903000 audit[2582]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e54020 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:29.903000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:30.143116 sshd[5703]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:30.144000 audit[5703]: USER_END pid=5703 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:30.146000 audit[5703]: CRED_DISP pid=5703 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:30.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.97:22-139.178.89.65:40226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:30.150188 systemd-logind[1810]: Session 26 logged out. Waiting for processes to exit. Mar 17 18:21:30.151004 systemd[1]: sshd@25-172.31.25.97:22-139.178.89.65:40226.service: Deactivated successfully. Mar 17 18:21:30.152415 systemd[1]: session-26.scope: Deactivated successfully. Mar 17 18:21:30.156621 systemd-logind[1810]: Removed session 26. Mar 17 18:21:35.026000 audit[5269]: AVC avc: denied { watch } for pid=5269 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.147743412/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c186,c511 tclass=file permissive=0 Mar 17 18:21:35.028642 kernel: kauditd_printk_skb: 13 callbacks suppressed Mar 17 18:21:35.028773 kernel: audit: type=1400 audit(1742235695.026:1553): avc: denied { watch } for pid=5269 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.147743412/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c186,c511 tclass=file permissive=0 Mar 17 18:21:35.026000 audit[5269]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40020d7400 a2=fc6 a3=0 items=0 ppid=4768 pid=5269 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 key=(null) Mar 17 18:21:35.049654 kernel: audit: type=1300 audit(1742235695.026:1553): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40020d7400 a2=fc6 a3=0 items=0 ppid=4768 pid=5269 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 key=(null) Mar 17 18:21:35.049770 kernel: audit: type=1327 audit(1742235695.026:1553): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:21:35.026000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:21:35.086000 audit[5201]: AVC avc: denied { watch } for pid=5201 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.1514046198/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c430 tclass=file permissive=0 Mar 17 18:21:35.086000 audit[5201]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400131e5a0 a2=fc6 a3=0 items=0 ppid=4719 pid=5201 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 key=(null) Mar 17 18:21:35.107688 kernel: audit: type=1400 audit(1742235695.086:1554): avc: denied { watch } for pid=5201 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.1514046198/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c430 tclass=file permissive=0 Mar 17 18:21:35.107803 kernel: audit: type=1300 audit(1742235695.086:1554): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400131e5a0 a2=fc6 a3=0 items=0 ppid=4719 pid=5201 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 key=(null) Mar 17 18:21:35.107868 kernel: audit: type=1327 audit(1742235695.086:1554): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:21:35.086000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Mar 17 18:21:35.172009 systemd[1]: Started sshd@26-172.31.25.97:22-139.178.89.65:60810.service. Mar 17 18:21:35.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.97:22-139.178.89.65:60810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:35.183276 kernel: audit: type=1130 audit(1742235695.172:1555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.97:22-139.178.89.65:60810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:35.350000 audit[5715]: USER_ACCT pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.353730 sshd[5715]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:35.356005 sshd[5715]: Accepted publickey for core from 139.178.89.65 port 60810 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:35.361314 kernel: audit: type=1101 audit(1742235695.350:1556): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.361441 kernel: audit: type=1103 audit(1742235695.352:1557): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.352000 audit[5715]: CRED_ACQ pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.376575 kernel: audit: type=1006 audit(1742235695.352:1558): pid=5715 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Mar 17 18:21:35.352000 audit[5715]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5227680 a2=3 a3=1 items=0 ppid=1 pid=5715 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:35.352000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:35.383559 systemd-logind[1810]: New session 27 of user core. Mar 17 18:21:35.384319 systemd[1]: Started session-27.scope. Mar 17 18:21:35.397000 audit[5715]: USER_START pid=5715 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.400000 audit[5717]: CRED_ACQ pid=5717 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.640541 sshd[5715]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:35.643000 audit[5715]: USER_END pid=5715 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.644000 audit[5715]: CRED_DISP pid=5715 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:35.646455 systemd[1]: session-27.scope: Deactivated successfully. Mar 17 18:21:35.647968 systemd[1]: sshd@26-172.31.25.97:22-139.178.89.65:60810.service: Deactivated successfully. Mar 17 18:21:35.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.97:22-139.178.89.65:60810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:35.649341 systemd-logind[1810]: Session 27 logged out. Waiting for processes to exit. Mar 17 18:21:35.651809 systemd-logind[1810]: Removed session 27. Mar 17 18:21:40.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.97:22-139.178.89.65:60812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:40.671798 systemd[1]: Started sshd@27-172.31.25.97:22-139.178.89.65:60812.service. Mar 17 18:21:40.674169 kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 17 18:21:40.674274 kernel: audit: type=1130 audit(1742235700.671:1564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.97:22-139.178.89.65:60812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:40.851000 audit[5735]: USER_ACCT pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:40.853074 sshd[5735]: Accepted publickey for core from 139.178.89.65 port 60812 ssh2: RSA SHA256:azelU3G0DadBCmAXuAehsKOCz630heU8UfFnUiqM6ac Mar 17 18:21:40.862273 kernel: audit: type=1101 audit(1742235700.851:1565): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:40.862000 audit[5735]: CRED_ACQ pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:40.865140 sshd[5735]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Mar 17 18:21:40.878584 kernel: audit: type=1103 audit(1742235700.862:1566): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:40.878865 kernel: audit: type=1006 audit(1742235700.862:1567): pid=5735 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Mar 17 18:21:40.862000 audit[5735]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd0cd9e0 a2=3 a3=1 items=0 ppid=1 pid=5735 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:40.888537 kernel: audit: type=1300 audit(1742235700.862:1567): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd0cd9e0 a2=3 a3=1 items=0 ppid=1 pid=5735 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:40.862000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:40.892308 kernel: audit: type=1327 audit(1742235700.862:1567): proctitle=737368643A20636F7265205B707269765D Mar 17 18:21:40.898388 systemd-logind[1810]: New session 28 of user core. Mar 17 18:21:40.899440 systemd[1]: Started session-28.scope. Mar 17 18:21:40.910000 audit[5735]: USER_START pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:40.911000 audit[5737]: CRED_ACQ pid=5737 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:40.931268 kernel: audit: type=1105 audit(1742235700.910:1568): pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:40.931429 kernel: audit: type=1103 audit(1742235700.911:1569): pid=5737 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:41.155422 sshd[5735]: pam_unix(sshd:session): session closed for user core Mar 17 18:21:41.156000 audit[5735]: USER_END pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:41.159990 systemd[1]: session-28.scope: Deactivated successfully. Mar 17 18:21:41.161527 systemd[1]: sshd@27-172.31.25.97:22-139.178.89.65:60812.service: Deactivated successfully. Mar 17 18:21:41.156000 audit[5735]: CRED_DISP pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:41.177825 kernel: audit: type=1106 audit(1742235701.156:1570): pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:41.177975 kernel: audit: type=1104 audit(1742235701.156:1571): pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Mar 17 18:21:41.178189 systemd-logind[1810]: Session 28 logged out. Waiting for processes to exit. Mar 17 18:21:41.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.97:22-139.178.89.65:60812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Mar 17 18:21:41.182144 systemd-logind[1810]: Removed session 28. Mar 17 18:21:54.418438 systemd[1]: cri-containerd-62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda.scope: Deactivated successfully. Mar 17 18:21:54.419018 systemd[1]: cri-containerd-62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda.scope: Consumed 4.766s CPU time. Mar 17 18:21:54.430013 kernel: kauditd_printk_skb: 1 callbacks suppressed Mar 17 18:21:54.430157 kernel: audit: type=1334 audit(1742235714.423:1573): prog-id=80 op=UNLOAD Mar 17 18:21:54.430222 kernel: audit: type=1334 audit(1742235714.423:1574): prog-id=85 op=UNLOAD Mar 17 18:21:54.423000 audit: BPF prog-id=80 op=UNLOAD Mar 17 18:21:54.423000 audit: BPF prog-id=85 op=UNLOAD Mar 17 18:21:54.481546 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda-rootfs.mount: Deactivated successfully. Mar 17 18:21:54.484285 env[1816]: time="2025-03-17T18:21:54.483851605Z" level=info msg="shim disconnected" id=62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda Mar 17 18:21:54.484285 env[1816]: time="2025-03-17T18:21:54.484263903Z" level=warning msg="cleaning up after shim disconnected" id=62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda namespace=k8s.io Mar 17 18:21:54.485033 env[1816]: time="2025-03-17T18:21:54.484292548Z" level=info msg="cleaning up dead shim" Mar 17 18:21:54.498811 env[1816]: time="2025-03-17T18:21:54.498748745Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:21:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5838 runtime=io.containerd.runc.v2\n" Mar 17 18:21:54.743092 systemd[1]: cri-containerd-fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09.scope: Deactivated successfully. Mar 17 18:21:54.743719 systemd[1]: cri-containerd-fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09.scope: Consumed 7.846s CPU time. Mar 17 18:21:54.743000 audit: BPF prog-id=117 op=UNLOAD Mar 17 18:21:54.748406 kernel: audit: type=1334 audit(1742235714.743:1575): prog-id=117 op=UNLOAD Mar 17 18:21:54.750000 audit: BPF prog-id=120 op=UNLOAD Mar 17 18:21:54.754265 kernel: audit: type=1334 audit(1742235714.750:1576): prog-id=120 op=UNLOAD Mar 17 18:21:54.775383 env[1816]: time="2025-03-17T18:21:54.775311552Z" level=info msg="shim disconnected" id=fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09 Mar 17 18:21:54.775919 env[1816]: time="2025-03-17T18:21:54.775859973Z" level=warning msg="cleaning up after shim disconnected" id=fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09 namespace=k8s.io Mar 17 18:21:54.776134 env[1816]: time="2025-03-17T18:21:54.776095272Z" level=info msg="cleaning up dead shim" Mar 17 18:21:54.786265 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09-rootfs.mount: Deactivated successfully. Mar 17 18:21:54.792499 env[1816]: time="2025-03-17T18:21:54.792439796Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:21:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5864 runtime=io.containerd.runc.v2\n" Mar 17 18:21:54.988135 kubelet[2815]: I0317 18:21:54.988070 2815 scope.go:117] "RemoveContainer" containerID="fcb479f75924f740e06777a8a81b77421910d49baec18c5b5987e1b644236f09" Mar 17 18:21:54.992020 env[1816]: time="2025-03-17T18:21:54.991966508Z" level=info msg="CreateContainer within sandbox \"d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Mar 17 18:21:54.997066 kubelet[2815]: I0317 18:21:54.996021 2815 scope.go:117] "RemoveContainer" containerID="62b53a615699cf64affbde75866ba54481ad667d5f2820f553c7b4bd840c9eda" Mar 17 18:21:55.000359 env[1816]: time="2025-03-17T18:21:55.000305713Z" level=info msg="CreateContainer within sandbox \"08e453191f5158ad92dc242b07dbe46bb00e9416bbcac6818625977d065ab16d\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Mar 17 18:21:55.024492 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2020153871.mount: Deactivated successfully. Mar 17 18:21:55.048343 env[1816]: time="2025-03-17T18:21:55.048281500Z" level=info msg="CreateContainer within sandbox \"d24788bb697285d7327806b34a5b748b854f1e444109f91d84548a6ad3d15dac\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"75c8d212a2385d92ae9db497a19fe9a0fb10d808115c95f3a48749245d37a76f\"" Mar 17 18:21:55.049596 env[1816]: time="2025-03-17T18:21:55.049547963Z" level=info msg="StartContainer for \"75c8d212a2385d92ae9db497a19fe9a0fb10d808115c95f3a48749245d37a76f\"" Mar 17 18:21:55.057427 env[1816]: time="2025-03-17T18:21:55.057300108Z" level=info msg="CreateContainer within sandbox \"08e453191f5158ad92dc242b07dbe46bb00e9416bbcac6818625977d065ab16d\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"1b1128b556b0f3a01e4fb23e10fde51c053829072126e030fccc21346c433199\"" Mar 17 18:21:55.058314 env[1816]: time="2025-03-17T18:21:55.058257083Z" level=info msg="StartContainer for \"1b1128b556b0f3a01e4fb23e10fde51c053829072126e030fccc21346c433199\"" Mar 17 18:21:55.092783 systemd[1]: Started cri-containerd-75c8d212a2385d92ae9db497a19fe9a0fb10d808115c95f3a48749245d37a76f.scope. Mar 17 18:21:55.117442 systemd[1]: Started cri-containerd-1b1128b556b0f3a01e4fb23e10fde51c053829072126e030fccc21346c433199.scope. Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.179229 kernel: audit: type=1400 audit(1742235715.152:1577): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.179391 kernel: audit: type=1400 audit(1742235715.152:1578): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.179445 kernel: audit: type=1400 audit(1742235715.152:1579): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.179498 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Mar 17 18:21:55.179551 kernel: audit: type=1400 audit(1742235715.152:1580): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.188508 kernel: audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.152000 audit: BPF prog-id=211 op=LOAD Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2889 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633864323132613233383564393261653964623439376131396665 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2889 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633864323132613233383564393261653964623439376131396665 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit: BPF prog-id=212 op=LOAD Mar 17 18:21:55.160000 audit[5891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2889 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633864323132613233383564393261653964623439376131396665 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit: BPF prog-id=213 op=LOAD Mar 17 18:21:55.160000 audit[5891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2889 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633864323132613233383564393261653964623439376131396665 Mar 17 18:21:55.160000 audit: BPF prog-id=213 op=UNLOAD Mar 17 18:21:55.160000 audit: BPF prog-id=212 op=UNLOAD Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.160000 audit: BPF prog-id=214 op=LOAD Mar 17 18:21:55.160000 audit[5891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2889 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633864323132613233383564393261653964623439376131396665 Mar 17 18:21:55.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.195000 audit: BPF prog-id=215 op=LOAD Mar 17 18:21:55.197000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.197000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2402 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313132386235353662306633613031653466623233653130666465 Mar 17 18:21:55.199000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.199000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2402 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313132386235353662306633613031653466623233653130666465 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit: BPF prog-id=216 op=LOAD Mar 17 18:21:55.201000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2402 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313132386235353662306633613031653466623233653130666465 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.201000 audit: BPF prog-id=217 op=LOAD Mar 17 18:21:55.201000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2402 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313132386235353662306633613031653466623233653130666465 Mar 17 18:21:55.201000 audit: BPF prog-id=217 op=UNLOAD Mar 17 18:21:55.204000 audit: BPF prog-id=216 op=UNLOAD Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { perfmon } for pid=5897 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit[5897]: AVC avc: denied { bpf } for pid=5897 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:21:55.204000 audit: BPF prog-id=218 op=LOAD Mar 17 18:21:55.204000 audit[5897]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2402 pid=5897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:21:55.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162313132386235353662306633613031653466623233653130666465 Mar 17 18:21:55.235934 env[1816]: time="2025-03-17T18:21:55.235760611Z" level=info msg="StartContainer for \"75c8d212a2385d92ae9db497a19fe9a0fb10d808115c95f3a48749245d37a76f\" returns successfully" Mar 17 18:21:55.257922 env[1816]: time="2025-03-17T18:21:55.257745184Z" level=info msg="StartContainer for \"1b1128b556b0f3a01e4fb23e10fde51c053829072126e030fccc21346c433199\" returns successfully" Mar 17 18:21:57.499000 audit[5920]: AVC avc: denied { watch } for pid=5920 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:57.499000 audit[5920]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400048ac60 a2=fc6 a3=0 items=0 ppid=2402 pid=5920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:57.499000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:57.500000 audit[5920]: AVC avc: denied { watch } for pid=5920 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Mar 17 18:21:57.500000 audit[5920]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40004a2040 a2=fc6 a3=0 items=0 ppid=2402 pid=5920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) Mar 17 18:21:57.500000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Mar 17 18:21:59.468810 systemd[1]: cri-containerd-13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3.scope: Deactivated successfully. Mar 17 18:21:59.469389 systemd[1]: cri-containerd-13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3.scope: Consumed 4.085s CPU time. Mar 17 18:21:59.470000 audit: BPF prog-id=76 op=UNLOAD Mar 17 18:21:59.473871 kernel: kauditd_printk_skb: 116 callbacks suppressed Mar 17 18:21:59.473989 kernel: audit: type=1334 audit(1742235719.470:1614): prog-id=76 op=UNLOAD Mar 17 18:21:59.470000 audit: BPF prog-id=97 op=UNLOAD Mar 17 18:21:59.478725 kernel: audit: type=1334 audit(1742235719.470:1615): prog-id=97 op=UNLOAD Mar 17 18:21:59.517541 env[1816]: time="2025-03-17T18:21:59.517475762Z" level=info msg="shim disconnected" id=13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3 Mar 17 18:21:59.518593 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3-rootfs.mount: Deactivated successfully. Mar 17 18:21:59.519596 env[1816]: time="2025-03-17T18:21:59.518850462Z" level=warning msg="cleaning up after shim disconnected" id=13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3 namespace=k8s.io Mar 17 18:21:59.520679 env[1816]: time="2025-03-17T18:21:59.520617432Z" level=info msg="cleaning up dead shim" Mar 17 18:21:59.537081 env[1816]: time="2025-03-17T18:21:59.537026426Z" level=warning msg="cleanup warnings time=\"2025-03-17T18:21:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5961 runtime=io.containerd.runc.v2\n" Mar 17 18:22:00.017454 kubelet[2815]: I0317 18:22:00.017411 2815 scope.go:117] "RemoveContainer" containerID="13986d1d765a563aaa0bc5d7cfed134f5ead97e7b2547a13b6b1e9db9a1194e3" Mar 17 18:22:00.021659 env[1816]: time="2025-03-17T18:22:00.021603427Z" level=info msg="CreateContainer within sandbox \"b12f35d810da61f3735b60756ea9307a75809b937f979aecf33f67dc8e704f95\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Mar 17 18:22:00.053666 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1886240409.mount: Deactivated successfully. Mar 17 18:22:00.061924 env[1816]: time="2025-03-17T18:22:00.061839475Z" level=info msg="CreateContainer within sandbox \"b12f35d810da61f3735b60756ea9307a75809b937f979aecf33f67dc8e704f95\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"690d2094f22b263b3175c1733c7356a3ff0dd10f1b5df12218ee66781dfaa121\"" Mar 17 18:22:00.064309 env[1816]: time="2025-03-17T18:22:00.064258124Z" level=info msg="StartContainer for \"690d2094f22b263b3175c1733c7356a3ff0dd10f1b5df12218ee66781dfaa121\"" Mar 17 18:22:00.111494 systemd[1]: Started cri-containerd-690d2094f22b263b3175c1733c7356a3ff0dd10f1b5df12218ee66781dfaa121.scope. Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.157191 kernel: audit: type=1400 audit(1742235720.142:1616): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.157386 kernel: audit: type=1400 audit(1742235720.142:1617): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.157441 kernel: audit: type=1400 audit(1742235720.142:1618): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.171149 kernel: audit: type=1400 audit(1742235720.142:1619): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.171367 kernel: audit: type=1400 audit(1742235720.142:1620): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.189264 kernel: audit: type=1400 audit(1742235720.142:1621): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.189352 kernel: audit: type=1400 audit(1742235720.142:1622): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.210246 kernel: audit: type=1400 audit(1742235720.142:1623): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.148000 audit: BPF prog-id=219 op=LOAD Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2428 pid=5984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:22:00.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639306432303934663232623236336233313735633137333363373335 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2428 pid=5984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:22:00.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639306432303934663232623236336233313735633137333363373335 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.149000 audit: BPF prog-id=220 op=LOAD Mar 17 18:22:00.149000 audit[5984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2428 pid=5984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:22:00.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639306432303934663232623236336233313735633137333363373335 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.156000 audit: BPF prog-id=221 op=LOAD Mar 17 18:22:00.156000 audit[5984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2428 pid=5984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:22:00.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639306432303934663232623236336233313735633137333363373335 Mar 17 18:22:00.163000 audit: BPF prog-id=221 op=UNLOAD Mar 17 18:22:00.163000 audit: BPF prog-id=220 op=UNLOAD Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { perfmon } for pid=5984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit[5984]: AVC avc: denied { bpf } for pid=5984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Mar 17 18:22:00.163000 audit: BPF prog-id=222 op=LOAD Mar 17 18:22:00.163000 audit[5984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2428 pid=5984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Mar 17 18:22:00.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639306432303934663232623236336233313735633137333363373335 Mar 17 18:22:00.253287 env[1816]: time="2025-03-17T18:22:00.253196305Z" level=info msg="StartContainer for \"690d2094f22b263b3175c1733c7356a3ff0dd10f1b5df12218ee66781dfaa121\" returns successfully" Mar 17 18:22:01.704111 kubelet[2815]: E0317 18:22:01.704027 2815 controller.go:195] "Failed to update lease" err="Put \"https://172.31.25.97:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-97?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Mar 17 18:22:11.704644 kubelet[2815]: E0317 18:22:11.704560 2815 controller.go:195] "Failed to update lease" err="Put \"https://172.31.25.97:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-97?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Mar 17 18:22:15.610959 systemd[1]: run-containerd-runc-k8s.io-409508756daa3de07f164db526036e4ddf744e97bd905cef1c783bbd04a1f943-runc.8UXY2C.mount: Deactivated successfully.