{"tests":[{"name":"cl.misc.falco","result":"FAIL","duration":537668509079,"output":"        cluster.go:125: Unable to find image 'falcosecurity/falco-driver-loader:master' locally\n        cluster.go:125: master: Pulling from falcosecurity/falco-driver-loader\n        cluster.go:125: 56d14e8ac0f6: Pulling fs layer\n        cluster.go:125: 2668931d6ced: Pulling fs layer\n        cluster.go:125: 45772c2149a2: Pulling fs layer\n        cluster.go:125: c178932887a8: Pulling fs layer\n        cluster.go:125: 155d3645546c: Pulling fs layer\n        cluster.go:125: 1ff52fa71ce4: Pulling fs layer\n        cluster.go:125: ee2bdbb63ba4: Pulling fs layer\n        cluster.go:125: 106f58b9d3af: Pulling fs layer\n        cluster.go:125: 155d3645546c: Waiting\n        cluster.go:125: 1ff52fa71ce4: Waiting\n        cluster.go:125: ee2bdbb63ba4: Waiting\n        cluster.go:125: 106f58b9d3af: Waiting\n        cluster.go:125: c178932887a8: Waiting\n        cluster.go:125: 2668931d6ced: Verifying Checksum\n        cluster.go:125: 2668931d6ced: Download complete\n        cluster.go:125: c178932887a8: Download complete\n        cluster.go:125: 155d3645546c: Verifying Checksum\n        cluster.go:125: 155d3645546c: Download complete\n        cluster.go:125: 56d14e8ac0f6: Verifying Checksum\n        cluster.go:125: 56d14e8ac0f6: Download complete\n        cluster.go:125: ee2bdbb63ba4: Verifying Checksum\n        cluster.go:125: ee2bdbb63ba4: Download complete\n        cluster.go:125: 106f58b9d3af: Verifying Checksum\n        cluster.go:125: 106f58b9d3af: Download complete\n        cluster.go:125: 45772c2149a2: Verifying Checksum\n        cluster.go:125: 45772c2149a2: Download complete\n        cluster.go:125: 1ff52fa71ce4: Verifying Checksum\n        cluster.go:125: 1ff52fa71ce4: Download complete\n        cluster.go:125: 56d14e8ac0f6: Pull complete\n        cluster.go:125: 2668931d6ced: Pull complete\n        cluster.go:125: 45772c2149a2: Pull complete\n        cluster.go:125: c178932887a8: Pull complete\n        cluster.go:125: 155d3645546c: Pull complete\n        cluster.go:125: 1ff52fa71ce4: Pull complete\n        cluster.go:125: ee2bdbb63ba4: Pull complete\n        cluster.go:125: 106f58b9d3af: Pull complete\n        cluster.go:125: Digest: sha256:db6f24e4b9c722cd1b63336aabc9e96d6110654b1dfdb8f7093b0ff320daf4bc\n        cluster.go:125: Status: Downloaded newer image for falcosecurity/falco-driver-loader:master\n        cluster.go:145: \"docker run --rm --privileged -v /root/.falco:/root/.falco -v /proc:/host/proc:ro -v /boot:/host/boot:ro -v /lib/modules:/host/lib/modules:ro -v /usr:/host/usr:ro -v /etc:/host/etc:ro falcosecurity/falco-driver-loader:master kmod\" failed: output * Setting up /usr/src links from host\n2026-10-20 01:29:07 INFO  Running falcoctl driver config\n                      ├ name: falco\n                      ├ version: 11.0.1+driver\n                      ├ type: kmod\n                      ├ host-root: /host\n                      └ repos: https://download.falco.org/driver\n2026-10-20 01:29:07 INFO  Committing driver config to specialized configuration file under\n                      └ directory: /etc/falco/config.d\n2026-10-20 01:29:08 INFO  Storing falcoctl driver config \n2026-10-20 01:29:08 INFO  Running falcoctl driver install\n                      ├ driver version: 11.0.1+driver\n                      ├ driver type: kmod\n                      ├ driver name: falco\n                      ├ compile: true\n                      ├ download: true\n                      ├ target: flatcar\n                      ├ arch: x86_64\n                      ├ kernel release: 6.6.159-flatcar\n                      └ kernel version: #1 SMP PREEMPT_DYNAMIC Mon Oct 19 22:28:15 -00 2026\n2026-10-20 01:29:08 INFO  Trying to download a driver.\n                      └ url: https://download.falco.org/driver/11.0.1%2Bdriver/x86_64/falco_flatcar_4081.3.10_1.ko\n2026-10-20 01:29:09 WARN  Non-200 response from url. code: 404\n2026-10-20 01:29:09 WARN  unable to find a prebuilt driver \n2026-10-20 01:29:09 INFO  Trying to compile the requested driver \n2026-10-20 01:29:09 INFO  Flatcar detected; relocating kernel tools.\n                      └ version: 4081.3.10\n2026-10-20 01:29:10 INFO  Trying automatic kernel headers download. \n2026-10-20 01:29:10 WARN  Failed to generate script.\n                      └ err: unexpected extraversion: flatcar\n2026-10-20 01:29:10 INFO  Trying to dkms install module. gcc: /usr/bin/gcc\n2026-10-20 01:31:20 INFO  kernel module available.\n                      └ path: /root/.falco/11.0.1+driver/x86_64/falco_flatcar_4081.3.10_1.ko\n2026-10-20 01:31:21 INFO  Trying to load a pre existent system module, if present.\n2026-10-20 01:31:21 WARN  Consider compiling your own driver and loading it or getting in touch with the Falco community.\n2026-10-20 01:31:21 ERROR failed: driver falco/11.0.1+driver is not installed in DKMS for kernel 6.6.159-flatcar: falco/11.0.1+driver, 6.6.159-flatcar, x86_64: installed (WARNING! Diff between built and installed module!), status Process exited with status 1\n"},{"name":"kubeadm.v1.36.1.calico.base/node_readiness","result":"PASS","duration":23191474566,"output":""},{"name":"kubeadm.v1.36.1.calico.base/nginx_deployment","result":"PASS","duration":14069584549,"output":""},{"name":"kubeadm.v1.36.1.calico.base/NFS_deployment","result":"PASS","duration":31119512478,"output":"        cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n        cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"kubeadm.v1.36.1.calico.base","result":"PASS","duration":618389052886,"output":"        cluster.go:125: I1020 01:29:13.506687    1807 version.go:260] remote version is much newer: v1.37.1; falling back to: stable-1.36\n        cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.36.5\n        cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.36.5\n        cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.36.5\n        cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.36.5\n        cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.14.2\n        cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.2\n        cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.8-0\n        cluster.go:125: I1020 01:30:30.215709    2129 version.go:260] remote version is much newer: v1.37.1; falling back to: stable-1.36\n        cluster.go:125: [init] Using Kubernetes version: v1.36.5\n        cluster.go:125: [preflight] Running pre-flight checks\n        cluster.go:125: E1020 01:30:30.749897    2129 remote_runtime.go:1177] \"RuntimeConfig from runtime service failed\" err=\"rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService\"\n        cluster.go:125: \t[WARNING ContainerRuntimeVersion]: You must update your container runtime to a version that supports the CRI method RuntimeConfig. Falling back to using cgroupDriver from kubelet config will be removed in 1.37. For more information, see https://git.k8s.io/enhancements/keps/sig-node/4033-group-driver-detection-over-cri\n        cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n        cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster\n        cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection\n        cluster.go:125: [preflight] You can also perform this action beforehand using 'kubeadm config images pull'\n        cluster.go:125: W1020 01:30:31.601360    2129 checks.go:907] detected that the sandbox image \"registry.k8s.io/pause:3.8\" of the container runtime is inconsistent with that used by kubeadm. It is recommended to use \"registry.k8s.io/pause:3.10.2\" as the CRI sandbox image.\n        cluster.go:125: [certs] Using certificateDir folder \"/etc/kubernetes/pki\"\n        cluster.go:125: [certs] Generating \"ca\" certificate and key\n        cluster.go:125: [certs] Generating \"apiserver\" certificate and key\n        cluster.go:125: [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local localhost] and IPs [10.96.0.1 10.0.0.4]\n        cluster.go:125: [certs] Generating \"apiserver-kubelet-client\" certificate and key\n        cluster.go:125: [certs] Generating \"front-proxy-ca\" certificate and key\n        cluster.go:125: [certs] Generating \"front-proxy-client\" certificate and key\n        cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation\n        cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation\n        cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation\n        cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation\n        cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation\n        cluster.go:125: [certs] Generating \"sa\" key and public key\n        cluster.go:125: [kubeconfig] Using kubeconfig folder \"/etc/kubernetes\"\n        cluster.go:125: [kubeconfig] Writing \"admin.conf\" kubeconfig file\n        cluster.go:125: [kubeconfig] Writing \"super-admin.conf\" kubeconfig file\n        cluster.go:125: [kubeconfig] Writing \"kubelet.conf\" kubeconfig file\n        cluster.go:125: [kubeconfig] Writing \"controller-manager.conf\" kubeconfig file\n        cluster.go:125: [kubeconfig] Writing \"scheduler.conf\" kubeconfig file\n        cluster.go:125: [control-plane] Using manifest folder \"/etc/kubernetes/manifests\"\n        cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-apiserver\"\n        cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-controller-manager\"\n        cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-scheduler\"\n        cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file \"/var/lib/kubelet/kubeadm-flags.env\"\n        cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/instance-config.yaml\"\n        cluster.go:125: [patches] Applied patch of type \"application/strategic-merge-patch+json\" to target \"kubeletconfiguration\"\n        cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/config.yaml\"\n        cluster.go:125: [kubelet-start] Starting the kubelet\n        cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory \"/etc/kubernetes/manifests\"\n        cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s\n        cluster.go:125: [kubelet-check] The kubelet is healthy after 5.425313ms\n        cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s\n        cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.4:6443/livez\n        cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz\n        cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez\n        cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 22.901498ms\n        cluster.go:125: [control-plane-check] kube-scheduler is healthy after 28.778854ms\n        cluster.go:125: [control-plane-check] kube-apiserver is healthy after 4.002214671s\n        cluster.go:125: [upload-config] Storing the configuration used in ConfigMap \"kubeadm-config\" in the \"kube-system\" Namespace\n        cluster.go:125: [kubelet] Creating a ConfigMap \"kubelet-config\" in namespace kube-system with the configuration for the kubelets in the cluster\n        cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs\n        cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]\n        cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]\n        cluster.go:125: [bootstrap-token] Using token: 7xxn4c.80nrihsols07qt8g\n        cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles\n        cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes\n        cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials\n        cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token\n        cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster\n        cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the API server kubelet client certificate to access the kubelet API\n        cluster.go:125: [bootstrap-token] Creating the \"cluster-info\" ConfigMap in the \"kube-public\" namespace\n        cluster.go:125: [kubelet-finalize] Updating \"/etc/kubernetes/kubelet.conf\" to point to a rotatable kubelet client certificate and key\n        cluster.go:125: [addons] Applied essential addon: CoreDNS\n        cluster.go:125: [addons] Applied essential addon: kube-proxy\n        cluster.go:125: \n        cluster.go:125: Your Kubernetes control-plane has initialized successfully!\n        cluster.go:125: \n        cluster.go:125: To start using your cluster, you need to run the following as a regular user:\n        cluster.go:125: \n        cluster.go:125:   mkdir -p $HOME/.kube\n        cluster.go:125:   sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\n        cluster.go:125:   sudo chown $(id -u):$(id -g) $HOME/.kube/config\n        cluster.go:125: \n        cluster.go:125: Alternatively, if you are the root user, you can run:\n        cluster.go:125: \n        cluster.go:125:   export KUBECONFIG=/etc/kubernetes/admin.conf\n        cluster.go:125: \n        cluster.go:125: You should now deploy a pod network to the cluster.\n        cluster.go:125: Run \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n        cluster.go:125:   https://kubernetes.io/docs/concepts/cluster-administration/addons/\n        cluster.go:125: \n        cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:\n        cluster.go:125: \n        cluster.go:125: kubeadm join 10.0.0.4:6443 --token 7xxn4c.80nrihsols07qt8g \\\n        cluster.go:125: \t--discovery-token-ca-cert-hash sha256:02a8539429adbddb8735daf8884c6188c149e6dc50fc91aa6f61b5b99534d06e \n        cluster.go:125: namespace/tigera-operator created\n        cluster.go:125: serviceaccount/tigera-operator created\n        cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator-secrets created\n        cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator created\n        cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created\n        cluster.go:125: rolebinding.rbac.authorization.k8s.io/tigera-operator-secrets created\n        cluster.go:125: deployment.apps/tigera-operator created\n        cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met\n        cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met\n        cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met\n        cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met\n        cluster.go:125: installation.operator.tigera.io/default created\n        cluster.go:125: apiserver.operator.tigera.io/default created\n        cluster.go:125: goldmane.operator.tigera.io/default created\n        cluster.go:125: whisker.operator.tigera.io/default created\n        cluster.go:125: W1020 01:31:31.438195    1653 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration\n        cluster.go:125: E1020 01:31:31.459378    1653 remote_runtime.go:1177] \"RuntimeConfig from runtime service failed\" err=\"rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService\"\n        cluster.go:125: \t[WARNING ContainerRuntimeVersion]: You must update your container runtime to a version that supports the CRI method RuntimeConfig. Falling back to using cgroupDriver from kubelet config will be removed in 1.37. For more information, see https://git.k8s.io/enhancements/keps/sig-node/4033-group-driver-detection-over-cri\n        cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n        cluster.go:125: W1020 01:31:31.884656    1653 utils.go:69] The recommended value for \"bindAddress\" in \"KubeProxyConfiguration\" is: ::; the provided value is: 0.0.0.0\n    --- PASS: kubeadm.v1.36.1.calico.base/node_readiness (23.19s)\n    --- PASS: kubeadm.v1.36.1.calico.base/nginx_deployment (14.07s)\n    --- PASS: kubeadm.v1.36.1.calico.base/NFS_deployment (31.12s)\n            cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n            cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"}],"result":"FAIL","platform":"qemu","version":"4081.3.10"}